Fluid - Google SSO

Introduction 

The instructions below explain how to setup Fluid and Google to create an SSO app in Google and then register the App within your Fluid instance. This will enable users to login into the Fluid instance using their Google credentials.

Your users in Fluid will need to be using the same email address as their accounts in Google. They will not be able to login if the accounts are not the same.

Steps

1. In Google Admin console Navigate to Apps -> Web and mobile apps.
Or click on this link: https://admin.google.com/ac/apps/unified

2. Click the Add button and select Add custom SAML app

3. Under the App details section enter Fluid as the name of the app.

4. Click continue, and on the next page download the metadata and copy the SSO Url and Entity ID and paste into notepad. You will need these values for the configuration in Fluid.

5. Click continue. Enter the Service provider details. 

The ACS Url will be your Fluid instance url with /AuthServices/Acs appended to the end.

The Entity Id is your Fluid instance url, remember to include the trailing slash as this is important.

Under Name ID select EMAIL as the Name ID format.

Click Continue.

6. No Attribute mappings are required. Click Finish.

7. Navigate to your Fluid instance. Click on your Avatar on the top right hand corner of the page. Select Administration Console from the drop down.  From the Administration Console select Authentication Providers.

Click Add Provider.

6. On the Provider Configuration

Provider Type - choose Google from the drop down.

Name - Enter a friendly name that users logging into Fluid will be presented with, ie: Google

App Entity ID - Enter your instance url here with the trailing slash.

IDP Entity ID - Enter the value that was copied to notepad from Google.

Single Sign On URL - Enter the SSO URL that was copied from Google.

Metadata XML - Click upload XML and select the metadata that was downloaded from Google.

7. Click Save

8. Click Save and Apply Settings to restart the instance with the new provider. Please allow 5min for the system to restart.

This will restart your application so be aware of this during business hours and disrupting your users.

Once the application has restarted you will be able to login on using the Google SSO Button on the normal login page.