This guide requires you to be administrator of your Google Workplace account
On Google Admin
Navigate to the Google Admin Console
Under Apps, click on Web and mobile apps
Click on Add app, then Add custom SAML app
Provide a name (e.g: Figures SAML), then click on Continue
Choose the Option 2: Copy the SSO URL and certificate. Then click on Continue
Under ACS URL, enter https://app.figures.hr/api/auth/saml/callback
Under Entity ID, enter https://app.figures.hr
Leave all other fields as they are, then click on Continue
Under Attributes, create the 3 following mappings:
Basic Information > First name to
firstNameBasic Information > Last name to
lastNameBasic Information > Primary email to
email
Click Finish
Click on User access to configure to which users/group to allow access to this integration
On Figures
Go to Settings
Scroll down until you find SAML SSO
If you don't have a SAML SSO configuration yet
Click on Configure SAML SSO
If you do, either update an existing configuration or create a new one
Click on Configuration tab
Enter your SAML Entry Point and Certificate. Those match the settings you've copied from Google before.
Entry Point corresponds to the SSO URL
Certificate corresponds to Certificate
Click on Save
Click on Test this configuration
Once you get back on Figures, you will most likely land on an error page letting you know that we had issues validating your SAML Profile.
To fix this, you need to Map your SAML Attributes.