Pipedrive cloud application
You must be signed in as a super administrator for this task.
Using Security Assertion Markup Language (SAML), your users can use their Google Cloud credentials to sign in to enterprise-cloud applications.
Set up SSO via SAML for Pipedrive
Note: Before configuring SSO you need a Pipedrive® domain. For example, the domain for "Your Company" could be yourcompany.pipedrive.com. If you don't have a Pipedrive domain, contact Pipedrive support to set one up.
Step 1: Set up Google as a SAML identity provider (IdP)-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
From the Admin console Home page, go to Apps
SAML apps.
To see Apps on the Home page, you might have to click More controls at the bottom.
- Click Add
at the bottom right.
- Locate and click Pipedrive in the application list.
- On the Google IDP Information page:
- Copy and save the SSO URL and Entity ID.
- Download the Certificate.
- Click Next.
The Basic information window shows the Application name and Description seen by users.
- Click Next.
- On the Service Provider Details page, edit the ACS URL and Entity ID, replacing {your‑domain} with your Pipedrive domain.
- Click Next.
- On the Attribute Mapping page, set the Select category and Select user field values as follows for the listed attribute:
Application attribute Select category Select user field Name Basic Information First Name - Click Finish.
- Open a new incognito browser window.
- Sign in to https://yourcompany.pipedrive.com with your organization’s Pipedrive administrator account, where yourcompany is your Pipedrive domain.
- Click the user profile icon at top right and select Settings.
- In the left pane, click SSO.
- Enter the following information in the input fields:
- Issuer: the Entity ID you copied in Step 1 above.
- Single Sign On (SSO) url: The SSO URL you copied in step 1.
- Single Log Out (SLO) url: https://yourcompany.pipedrive.com.
- X.509 certificate: The certificate you downloaded in Step 1.
- Click Save Changes.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
From the Admin console Home page, go to Apps
SAML apps.
To see Apps on the Home page, you might have to click More controls at the bottom.
- Select Pipedrive.
-
At the top right of the gray box, click Edit Service
.
-
To turn on or off a service for everyone in your organization, click On for everyone or Off for everyone, and then click Save.
-
To turn on or off a service only for users in an organizational unit:
- At the left, select the organizational unit.
- Select On or Off.
- To keep the service turned on or off even when the service is turned on or off for the parent organizational unit, click Override.
- If the organization's status is already Overridden, choose an option:
- Inherit—Reverts to the same setting as its parent.
- Save—Saves your new setting (even if the parent setting changes).
Learn more about organizational structure.
- Ensure that your Pipedrive user account email IDs match those in your Google domain.
- In a new browser window, go to https://yourcompany.pipedrive.com/auth/sso.
You should be automatically redirected to the Google sign-in page.
- Enter your sign-in credentials.
After your sign-in credentials are authenticated, you're automatically redirected back to Pipedrive. If your account doesn’t exist in Pipedrive, you’ll be prompted to confirm your email address before you can sign in.