Google Integration


In order to configure Google SSO integration with Metro Retro you will need:

  • Admin access to your Metro Retro account.

  • Admin access to your organization's Google account.

  • One or more authorized domains adding to your Metro Retro account (see end of article).

  • A note of your organizations Metro Retro Account ID.

How to find your Metro Retro Account ID

Before you begin, you will need your organization's 12 character Metro Retro Account ID. You can find this in the under the management menu within Metro Retro:

Integration Setup

From within the Google dashboard, choose Apps > Web and Mobile Apps from the left hand navigation. Then, click Add App and choose Custom SAML App.

Step 1 - App details

Set the name as Metro Retro and optionally add an icon. We recommend using this image as the icon:

Click Continue.

Step 2 - Google Identity Provider details

Here we will configure Metro Retro with the settings it needs to communicate with the Google IDP service. To do this, open a new tab/window in your browser and go to

Copy the settings from the Google screen into Metro Retro as follows:

  • For "Entry Point" use the "SSO URL" value

  • For "Issuer" use the "Entity ID" value

  • For "Certificate" use the "Certificate" value (note will be quite large).

Once copied, click Save.

Back on the Google page, click Continue.

Step 3 - Service provider details

On this screen we configure the Google side with the configuration it needs to communicate with Metro Retro.

Input the following settings:

  • For "ACS URL" use

  • For "Entity ID" use your Metro Retro Account ID (see above on where to find this).

  • Leave all other settings as their defaults.

Click Continue.

Step 4 - Attribute mapping

The final step is to configure which profile values Google will send to Metro Retro. We need to map three of these:

  • "First name" should be mapped to firstName

  • "Last name" should be mapped to lastName

  • "Email name" should be mapped to email

Click Continue to complete the setup wizard.

Step 5 - Grant access

Depending on how your organization is configured, it's likely that Metro Retro will be OFF for all users by default. You can control which users have access to the app via the User Access screen available from inside the App information panel. The easiest way to configure this is to set the app ON for everyone.

Step 6 - Configure domains

If you have not already had your authorized domains configured by a Metro Retro team member, please contact us on Intercom or at to set these up. The domains must include all domains that your team will login from.

Last updated