To activate Single Sign-On (SSO) for your Fax.Plus account through Google, allowing your team members to access Fax.Plus from their Google Workspace dashboard, ensure that you hold administrative privileges for both Fax.Plus and Google Workspace.
Once you meet the above prerequisites, follow these steps to activate SSO via Google:
Step 1: Add Fax.Plus app to Google
- Login to your Google Admin console, find Apps and go to Web and mobile apps.
- Click on Add App, followed by Add custom SAML app.
- Type "Alohi" as the name of your app, and click on Continue.
- In the Google Identity Provider details section, keep copies of:
- SSO URL
- Entity ID
- Certificate
- In the section for Service Provider Details, make sure to add the data as below:
- ACS URL: https://sso.alohi.com/login
- Entity ID: https://sso.alohi.com/metadata
- Name ID format: EMAIL
- Name ID: Basic Information > Primary email
- In the section for Attribute Mapping, make sure to add the First name and Last name with "firstname" and "lastname" as attributes.
- Click on Finish to complete the setup.
Step 2: Configure SAML 2.0 on Fax.Plus
- Log in to your Fax.Plus account, and go to the Settings section on your Dashboard.
- Find the tab for Security, and look for the box for Access Management.
- To the right of Single Sign-On (SSO), click on Activate.
- Fill in the required fields of the configuration panel:
- Fill in the Entity ID section with the Entity ID provided.
- Fill in the Single Sign-On URL section with the ACS URL provided.
- Add the provided Certificate in the section X.509 Certificate.
- If you want to allow users to continue logging in using your Fax.Plus username and password, please leave Allow using email and password to login option checked.
- Click on Confirm.
- Once Fax.Plus is added to the Google Admin console, each member can directly access the app on Google Workspace directly from their computer or mobile device.
Keep in mind that Google does not support SCIM, so to add users to your account, you will need to send invitations manually. Each user must accept the invitation in order to access Google SSO login.