This example shows setting up an Google Workspace SAML application and connecting it to Snyk to facilitate SSO.
{% hint style="info" %} For details in addition to the information provided on this page, see the Google documentation. {% endhint %}
Start by logging into the Google Workspace admin area.
-
Go to Apps and then click Web and mobile apps.
 (2) (1) (1) (1) (1) (1) (1).png)
Open Web and Mobile apps
-
Click on Add app and choose Add custom SAML app.
.png)
Add new custom SAML app
-
Name your application appropriately and click Continue.
.png)
Name the SAML app
-
Download the certificate and open it in your preferred text editor.
 (1) (1).png)
Download signing certificate
-
Navigate to the Snyk portal, login and from the drop down at the top left select GROUP OVERVIEW and then the cog wheel (top right corner) to get to your group settings.
 (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (3) (1).png)
Open group view in Snyk
-
Click on SSO, scroll down to step 2, and paste the Google SSO URL from step 4 into Sign in URL and the certificate in your text editor into X509 signing certificate.
Add the domain name(s) you are configuring this connection for in Email domains and subdomains that need SSO access.
Verify if an IdP-initiated workflow should be enabled and then save your modifications (1) (1) (1) (1).png)
Enter details from Google Workspace
-
Scroll up to step 1 and copy the Entity ID and ACS URL.
.png)
Copy details from Snyk
-
Go back to the Google admin portal , click Continue, and paste those two values into their respective fields. Then tick Signed response.
.png)
Enter details from Snyk in Google
-
Click Continue, add an app attribute named email tied to the Primary Email, and save the configuration.
 (1).png)
Add email attribute
-
Enable access to your app for your users by clicking User Access, tick On for everyone, and Save. Modify organizational access as needed.
.png)
Enable SSO app for the organization
-
Finalize the setup by going back to the Snyk portal and decide how new users should be processed when signing in. Choose the option you would like to use: Group member, Org collaborator, or Org admin.
-
Then add the previously created email app attribute to both Email and Username and save the configuration. If you wish to populate the full name you may configure a custom attribute in Google Workspace.
Tie together attributes from Google to Snyk
 (2) (1) (1) (1) (1) (1) (1).png)
.png)
.png)
 (1) (1).png)
 (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (3) (1).png)
 (1) (1) (1) (1).png)
.png)
.png)
 (1).png)
.png)
