Google Integration
Prerequisites
In order to configure Google SSO integration with Metro Retro you will need:
Admin access to your Metro Retro account.
Admin access to your organization's Google account.
One or more authorized domains adding to your Metro Retro account (see end of article).
A note of your organizations Metro Retro Account ID.
How to find your Metro Retro Account ID
Before you begin, you will need your organization's 12 character Metro Retro Account ID. You can find this in the under the management menu within Metro Retro: https://metroretro.io/manage
Integration Setup
From within the Google dashboard, choose Apps > Web and Mobile Apps from the left hand navigation. Then, click Add App and choose Custom SAML App.
Step 1 - App details
Set the name as Metro Retro and optionally add an icon. We recommend using this image as the icon: https://s.metroretro.io/site/logo/logo-padded.png
Click Continue.
Step 2 - Google Identity Provider details
Here we will configure Metro Retro with the settings it needs to communicate with the Google IDP service. To do this, open a new tab/window in your browser and go to https://metroretro.io/manage/security/sso.
Copy the settings from the Google screen into Metro Retro as follows:
For "Entry Point" use the "SSO URL" value
For "Issuer" use the "Entity ID" value
For "Certificate" use the "Certificate" value (note will be quite large).
Once copied, click Save.
Back on the Google page, click Continue.
Step 3 - Service provider details
On this screen we configure the Google side with the configuration it needs to communicate with Metro Retro.
Input the following settings:
For "ACS URL" use
https://metroretro.io/login/samlFor "Entity ID" use your Metro Retro Account ID (see above on where to find this).
Leave all other settings as their defaults.
Click Continue.
Step 4 - Attribute mapping
The final step is to configure which profile values Google will send to Metro Retro. We need to map three of these:
"First name" should be mapped to
firstName"Last name" should be mapped to
lastName"Email name" should be mapped to
email
Click Continue to complete the setup wizard.
Step 5 - Grant access
Depending on how your organization is configured, it's likely that Metro Retro will be OFF for all users by default. You can control which users have access to the app via the User Access screen available from inside the App information panel. The easiest way to configure this is to set the app ON for everyone.
Step 6 - Configure domains
If you have not already had your authorized domains configured by a Metro Retro team member, please contact us on Intercom or at contact@metroretro.io to set these up. The domains must include all domains that your team will login from.
Last updated
