Skip to main content
Configure Google Workspace as a SAML identity provider so your users can sign in to Bronto with their existing Google accounts. You start the provider in Bronto to obtain the values to paste into Google, configure the Google SAML app, then finish the Bronto wizard.

​
Step 1: Start the provider in Bronto

In Bronto, go to Settings > Authentication > Login Methods and click Add Provider in the SSO section. Set Choose protocol to SAML.

​
Name

Pick a unique name for this IdP within your organisation (e.g. “Google”). Name your provider step

​
Upload

On the Upload step, the Paste these into your IdP panel shows the values you need to configure the Google SAML app — the ACS URL, Entity ID, and Default Relay State. Keep this open while you configure Google in Step 2, then upload the metadata XML that Google gives you back into this step. Upload IdP metadata step

​
Step 2: Configure the SAML app in Google

View the dedicated Google instructions

​
Service Provider Details

  • Application Name - Can be anything
  • Description - Can be anything
  • ACS URL - Use the ACS URL from the Bronto Upload step.
  • Entity ID - Use the Entity ID from the Bronto Upload step.
  • Start URL - Use the Default Relay State from the Bronto Upload step.
  • Signed Response - Leave unchecked
  • Name ID - Select Basic Information and Primary Email

​
Attribute Mapping

Bronto requires a First name, Last name and Primary Email attributes from Basic Information. These can map to any fields, as long as you match the names used when configuring the IdP in Bronto. If you wish to use role mapping, you must also configure attribute mapping from group membership to the attribute mapped to custom:member_of. See SSO Role Mapping.

​
Step 3: Finish the wizard in Bronto

Back in Bronto, upload the metadata XML from Google on the Upload step, then complete the remaining steps.

​
Email

Add the email domains that should route to this provider (e.g. bronto.io). Type each domain and press Enter. Email domains step

​
Map

Map your Google attributes to Bronto’s required First Name, Last Name, and Email, matching the attribute names you configured in Google. To use role mapping, click + Add role mapping and map your group membership attribute to custom:member_of. Map IdP attributes step Click Save to create and enable the IdP.