In order to activate Single Sign-On, you will need administrator access to all accounts, as well as the technical knowledge to correctly configure authentication and grant access. It may be necessary to contact the IT Manager or Lead Technician within your organization.
Initial G Suite Setup
Click on Apps then select Web and Mobile Apps
Select the Add app dropdown and choose Add customer SAML App
App details
Enter Way We Do into the App name field
Enter a Description
Upload a logo (optional)
Click Continue
Google Identify Provider details
Google will generate an SSO URL, Entity ID, and Certificate. You'll need these to configure Way We Do, however you do not need to copy them now as they'll be accessible later
Service provider details
Enter the ACS URL as https://[yoursubdomain].waywedo.com/SAML/AssertionConsumerService
Enter the Entity ID - https://[yoursubdomain].waywedo.com
Leave Start URL blank and do not select the Signed response box
Select EMAIL as the Name ID format
Select Basic Information > Primary email as the Name ID
Click Continue
You will need to replace the [yoursubdomain] text with the sub-domain of your unique URL of your Way We Do account.
Attribute Mapping:
Select First name in the dropdown on the first line and copy & paste the below URL into the App attributes field http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
Select Last name in the dropdown on the second line and copy & paste the below URL into the App attributes field http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
Click Finish in the bottom right corner
Turn On Single Sign-On
On the confirmation screen, ensure you have SSO ON for everyone
Do not close this confirmation screen, you'll need details from here to complete the Way We Do setup
Activate Way We Do Setup
In a separate tab or window, navigate to Way We Do to copy the information from the setup screen to your account in Way We Do.
Click the 'waffle' icon in the top right corner of any page in Way We Do, then click Account in the dropdown menu
Click Single Sign On
Enter a Single sign-on name - This name will appear on the sign-on page once the function is enabled to inform users of the single sign-on option. (e.g. Google Apps Sign-On, Acme Co. Single Sign-On, Company Login)
Enter the Entity ID from the Google SAML confirmation page
Enter the SAML SSO URL from the Google SAML confirmation page
Upload your certificate, located on the Google SAML confirmation page, by clicking the Select button next to Certificate - The information passed between the Identity Provider and Way We Do needs to be encrypted, so a certificate is used.
Optional Settings:
Enable Passwords - This option disables the regular password function for Way We Do so that users must use single sign-on
Enable Auto-provisioning - When this is enabled, the email address used to sign-on will be automatically compared to the list of users in Way We Do. If the email address does not match a current user in Way We Do, it will create the option to automatically add a new user account for the person signing in. This is ideal for large organizations since they can simply tell users to log in and it will automatically add them as users in Way We Do.
NOTE: Users added through single sign-on are added as general users and are not assigned a role in the system. A role can be manually added, and the user can be changed to an Editor or Admin within Way We Do.
If you are happy with the settings, you will need to turn on single sign-on by clicking the toggle button over to Yes.
Click Save
The Single Sign-on setup is now complete. Your login screen for Way We Do will include the new SSO (Single Sign-On) option.
NOTE: Signing out of Way We Do will NOT automatically sign a user out of the Google account. If users are on shared computers, they will need to log out of their Google account before another user can log into Way We Do using Single Sign-On.