Google GSuite SAML Integration

Step 1 – Configure Google SAML Application

Sign into the Google Admin Console (admin.google.com)
Navigate to Apps / Web and mobile apps
Click Add App and select Add custom SAML app in the drop down
In the App details screen. add Digital Campus in the App name field
In the Google Identity Provider Details screen, under Option 1: Download IdP metadata click Download Metadata and save for a later step, then click Continue
In the Service provider details page, Enter the following information:
- ACS URL = https://digitalcampus.swankmp.net/saml/ReceiveSingleSignOn
- Entity ID = https://digitalcampus.swankmp.net
- (When copying and pasting this info, make sure there is no trailing "/" or spaces on the G suite side. This will result in errors)
- Check Signed response
- Name ID format = UNSPECIFIED
- Name ID = Basic Information > Primary email
  
  Click Continue
On the Attributes Screen click ADD MAPPING and enter the details below. Renaming the attributes to the urn:oid standard will allow the streaming portal to identify the attribute and auto populate these required fields for instructor/admin accounts.
- Google Directory attributes: --> App attributes:
- Required
  - First Name --> urn:oid:2.5.4.42
  - Last Name --> urn:oid:2.5.4.4
  - Primary email --> urn:oid:0.9.2342.19200300.100.1.3
- Suggested
  - Organizational Unit Path --> ou
    Note: Organizational Unit Path may be very useful to distinguish Students from Instructors in the Role Mapping of Digital Campus. You may add these attributes as needed. These fields are in the Employee Details Category in GSuite.
- Click Finish
User access should be enabled for the appropriate organizational units.
1. Access can be modified under Apps > Web and mobile apps
2. Click on the Swank SAML App you created to open for editing.
3. Expand the user access section by clicking the expansion icon in the upper right corner.
4. You can turn on for everyone to test initially and if desired you can scale back access later.