Kintone cloud application

You must be signed in as a super administrator for this task.

With Security Assertion Markup Language (SAML), your users can sign in to enterprise cloud applications with their Google Cloud credentials.

Set up SSO via SAML for Kintone

Before configuring SSO, ask Kintone®  support to provide a unique subdomain for your organization. Contact Kintone support to set one up and allow one business day for setup.

Step 1: Set up Google as a SAML identity provider (IdP)
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Apps and then SAML Apps.

    To see Apps on the Home page, you might have to click More controls at the bottom. 

  3. Click the plus (+) icon at the bottom right.
  4. Locate and click Kintone in the application list.
  5. On the Google IDP Information page:
    • Copy and save the SSO URL.
    • Download the Certificate.
  6. Click Next.

    The Basic information window shows the Application name and Description seen by users.

  7. Click Next.
  8. On the Service Provider Details page, edit the ACS URL,  replacing {your‑domain} with your subdomain name provided by Kintone.
  9. Click Finish.
Step 2: Set up Kintone as a SAML 2.0 service provider (SP)
  1. Open a new incognito browser window.
  2. Sign in to https://yourcompany.kintone.com/admin with your organization's Kintone administrator account, where yourcompany is the subdomain provided by Kintone.
  3. Under System Administration, click Login.
  4. Check the box on the right to enable SAML Authentication.
  5. In the Login URL field, paste the SSO URL you copied in step 1.
  6. In the Logout URL field, paste https://yourcompany.kintone.com/logout.
  7. Click Save.
  8. (Optional) Create users in Kintone:
    • Under User Administration on the left, select Departments & Users.
    • Click New User.
    • Fill in the new user profile form with appropriate values, making sure your Google user email address is entered in the Login Name field.
    • Click Save.
Step 3: Enable the Kintone app
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Apps and then SAML Apps.

    To see Apps on the Home page, you might have to click More controls at the bottom. 

  3. Select Kintone.
  4. At the top right of the gray box, click Edit Service Compose.
    At the left, the top-level organization and any organizational units appear.

  5. To apply settings to all organizations, click On for everyone or Off for everyone, and then click Save

  6. To apply settings to individual organizational units, do the following: 

    • At the left, select the organizational unit that contains the users whose settings you want to change.
    • To change the setting, select On or Off.
    • To keep the setting the same, even if the parent setting changes, click Override.
    • If the organization's status is already Overridden, choose an option:
      Inherit—Reverts to the same setting as its parent.
      Save—Saves your new setting (even if the parent setting changes).

    Learn more about the organizational structure.

  7. Ensure that your Kintone user account email IDs match those in your Google domain.
Step 4: Verify that the SSO is working
  1. Close all browser windows.
  2. Open https://yourcompany.kintone.com.You should be redirected to the Google sign-in page.
  3. Enter your username and password.

    After your credentials are authenticated, you are redirected back to Kintone.

  4. Verify that the login profile in Kintone corresponds to the user logged in via Google authentication.
Was this article helpful?
How can we improve it?