Emburse cloud application
You must be signed in as a super administrator for this task.
Using Security Assertion Markup Language (SAML), your users can use their Google Cloud credentials to sign in to enterprise-cloud applications.
Set up SSO via SAML for Emburse
Here's how to set up single sign-on (SSO) via SAML for the Emburse® application.
Step 1: Get Google identity provider (IdP) information-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
From the Admin console Home page, go to Apps
SAML apps.
To see Apps on the Home page, you might have to click More controls at the bottom.
- Click Add
at the bottom right.
- Locate and click Emburse in the application list.
- On the Google IDP Information page, download the IDP metadata file.
Leave the Admin console open, you'll continue with the configuration wizard after performing the next step in Emburse.
- Open a new incognito browser window.
- Sign in to https://app.emburse.com/login?next=/members with your organization's Emburse admin account.
- Navigate to Admin
Company Settings.
- In Single Sign-On (SSO) Settings, click Enable Single Sign-On.
- Enter your organization's domain name and click Next.
- Paste the Google IdP metadata you downloaded in Step 1 into the IdP Metadata text input area in Emburse.
- Click Save.
- Copy and save the Single Sign-on URL (ACS URL). You'll use this URL to finish SSO configuration in the Admin console in the Step 3.
- Return to the Admin console browser tab.
- In the SSO configuration wizard, click Next.
The Basic information window shows the Application name and Description seen by users.
- Click Next.
- On the Service Provider Details page, replace the default ACS URL with the ACS URL you copied from Emburse in Step 2.
- Click Next.
- On the Attribute Mapping page, set the Select category and Select user field values as follows for the listed attributes:
Application attribute Select category Select user field firstName Basic Information First Name lastName Basic Information Last Name - Click Finish.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
From the Admin console Home page, go to Apps
SAML apps.
To see Apps on the Home page, you might have to click More controls at the bottom.
- Select Emburse.
-
At the top right of the gray box, click Edit Service
.
-
To turn on or off a service for everyone in your organization, click On for everyone or Off for everyone, and then click Save.
-
To turn on or off a service only for users in an organizational unit:
- At the left, select the organizational unit.
- Select On or Off.
- To keep the service turned on or off even when the service is turned on or off for the parent organizational unit, click Override.
- If the organization's status is already Overridden, choose an option:
- Inherit—Reverts to the same setting as its parent.
- Save—Saves your new setting (even if the parent setting changes).
Learn more about organizational structure.
- Ensure that your Emburse user account email IDs match those in your Google domain.
- Open https://app.emburse.com/login?next=/members , enter your account email address, and click Next.
- Click Log in with SSO. You should be redirected to the Google sign-in page.
- Enter your email address and password and click Sign in.
As part of Emburse’s two-factor authentication process, a verification code is sent to the phone associated with your admin account.
- Click Verify Code.
After your sign-in credentials are authenticated, you're automatically redirected back to Emburse.