7geese cloud application

Before configuring SSO, sign in to 7Geese^® and get the SAML Unique ID for your organization:

1. Click Org Settings  Integrations.
2. Select Single Sign-On  SAML.
3. Click Configure.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. From the Admin console Home page, go to Apps  SAML Apps.

   To see Apps on the Home page, you might have to click More controls at the bottom. 

3. Click the plus (+) icon at bottom right. 
4. Locate and click 7Geese in the application list.
5. On the Google IDP Information page, download the IDP metadata and copy the SSO URL and EntityID.
6. Click Next.

   The Basic information window shows the Application name and Description seen by users.

7. Click Next.
8. On the Service Provider Details page, edit the ACS URL, replacing {uniqueid-provided-by-sp} with the Unique ID provided during the 7Geese SAML setup. 
9. On the Attribute Mapping page, set Select category and Select user field values as follows for the listed attributes:

9. Click Finish.

On a publicly accessible file server, host the Google IDP metadata file downloaded in step 1. The file must be served directly, not via any redirects. The file also needs to be permanently available at a specific URL. It is requested by 7Geese each time a user signs in.

1. Open a new incognito browser window.
2. Sign in to https://www.7geese.com with your organization's 7Geese administrator account.

3. Click Org Settings at top. 

4. Click Integrations on the left, then Single Sign-on  SAML.

5. In the Issuer field, enter the Entity ID you copied in step 1.

6. In the SSO URL field, enter the SSO URL you copied in step 1.

7. In the Metadata URL field, enter the IDP metadata link you copied in step 2.

8. In the x.509 Certificate field, paste the certificate you downloaded in Step 1, including the Begin Certificate and End Certificate text.

9. Click Update Settings.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. From the Admin console Home page, go to Apps  SAML Apps.

   To see Apps on the Home page, you might have to click More controls at the bottom. 

3. Select 7Geese.

4. At the top right of the gray box, click Edit Service .

5. To turn on or off a service for everyone in your organization, click On for everyone or Off for everyone, and then click Save.

6. To turn on or off a service only for users in an organizational unit:

   1. At the left, select the organizational unit.
   2. Select On or Off.
   3. To keep the service turned on or off even when the service is turned on or off for the parent organizational unit, click Override.
   4. If the organization's status is already Overridden, choose an option:
      • Inherit—Reverts to the same setting as its parent.
      • Save—Saves your new setting (even if the parent setting changes).

   Learn more about organizational structure.

7. Ensure that your 7Geese user account email IDs match those in your Google domain.

1. Close all browser windows.
2. Open https://app.7geese.com/login/?next= and attempt to sign in. You should be redirected to the Google sign-in page.
3. Enter your user name and password.

After your credentials are authenticated, you are redirected back to 7Geese.