UserEcho cloud application

You must be signed in as a super administrator for this task.

With Security Assertion Markup Language (SAML), your users can sign in to enterprise cloud applications with their Google Cloud credentials.

Set up SSO via SAML for UserEcho

Step 1: Set up Google as a SAML identity provider (IdP)

 

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Apps and then SAML Apps.

    To see Apps on the Home page, you might have to click More controls at the bottom. 

  3. Click the plus (+) icon at the bottom right. 
  4. Locate and click UserEcho in the application list.
  5. On the Google IDP Information page, download the certificate and copy the SSO URL.
  6. Click Next.

    The Basic information window shows the Application name and Description seen by users.

  7. Click Next.
  8. On the Service Provider Details page, edit the ACS URL and Entity ID, replacing {your-domain} with your domain as registered on UserEcho. 
  9. The default Name ID is the primary email. 
  10. Leave the Name ID Format as Unspecified.
  11. Click Next.
  12. On the Attribute Mapping page, set Select category and Select user field values as follows for the listed attributes:
Application attribute Select category Select user field
email Basic Information Primary Email
First name Basic Information First Name
Last name Basic Information Last Name
  1. Click Finish.
Step 2: Set up UserEcho as a SAML 2.0 service provider (SP)
  1. Open a new incognito browser window.
  2. Sign in to https://www.userecho.com with your organization's UserEcho administrator account.
  3. Click Settings and then Integrations and then Website and then Single Sign-on (SAML).

  4. In the SAML SSO URL field, enter the SSO URL you copied in step 1.

  5. In the x.509 Certificate field, paste the certificate you downloaded in step 1.

  6. Click Save.
  7. Click Settings and then Project and then Login settings.
  8. From the Login type list, select SAML redirect. 
  9. Click Save.
Step 3: Enable the UserEcho app
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Apps and then SAML Apps.

    To see Apps on the Home page, you might have to click More controls at the bottom. 

  3. Select UserEcho.
  4. At the top of the gray box, click More Settingsand choose:
    • On for everyone to turn on the service for all users (click again to confirm).
    • Off for everyone to turn off the service for all users (click again to confirm).
    • On for some organizations to change the setting only for some users.
  5. Ensure that your UserEcho user account email IDs match those in your Google domain.
Step 5: Verify that the SSO is working
  1. Close all browser windows.
  2. Open https://{your-domain}.userecho.com and attempt to sign in. You should be redirected to the Google sign-in page.
  3. Enter your user name and password.

After your credentials are authenticated, you are redirected back to UserEcho.

Was this article helpful?
How can we improve it?