Edge Control Cloud - Integrate Single Sign-On With Google using SAML. – StorMagic Support

This article explains how to configure Single Sign-On (SSO) for Edge Control using Google Workspace as the identity provider (IdP).

Audience: Administrators Product: Edge Control Topic: Google Workspace SSO Includes: SAML • Role Mapping • Google Workspace

Note: Ensure the required SAML attributes and claims are configured correctly in Google Workspace before enabling SSO. Incorrect mappings will prevent authentication.

Configure Google Workspace Single Sign-On

Expand the sections below to create the Google Workspace SAML application, configure Edge Control, test authentication and optionally configure role mapping.

Create the Google Workspace SAML Application

Log in to the Google Workspace Admin Console and navigate to Apps → Web and mobile apps, then create a new SAML application.

Create a new SAML application

Follow the wizard, provide a name and description for the application, then select CONTINUE.

Application name and description

Select Option 1 and download the SAML metadata XML file. Save this file as it will be required later when configuring Edge Control.

Download the SAML metadata

↑ Back to top

Configure the SAML Application

Configure the SAML application using the following values.

Attribute	Value
ACS URL	https://auth.manage.stormagic.com/saml2/idpresponse
Entity ID	urn:amazon:cognito:sp:eu-west-1_Wj6yDgTye
Name ID Format	EMAIL
Name ID	Basic Information > Primary email

SAML service provider details

Next, configure the attribute mappings between Google Workspace and Edge Control.

Google Directory Attribute	App Attribute
First name	firstName
Last name	lastName
Primary email	email

Configure attribute mapping

Select FINISH to complete creation of the Google Workspace SAML application.

Note: Role mapping is optional and is covered later in this article.

↑ Back to top

Configure Single Sign-On in Edge Control

Navigate to Administration → Authentication → Single Sign-On (SSO).

Open the Single Sign-On configuration

Enable SAML authentication and upload the metadata XML file that was downloaded from Google Workspace during the SAML application creation.

Upload the Google Workspace metadata

Save the configuration. Edge Control imports the identity provider information from the metadata file and enables Google Workspace as a SAML authentication source.

Tip: Keep an administrator account authenticated until SSO has been fully tested to prevent accidental lockout.

↑ Back to top

Test the SSO Login

After saving the SSO configuration, sign out of Edge Control and select Sign in with Google Workspace from the login page.

Edge Control SSO login

Authenticate using a Google Workspace account that has been assigned access to the SAML application.

Google Workspace authentication

After successful authentication, you should be redirected back to Edge Control and logged in automatically.

Success: If authentication succeeds, Google Workspace SSO has been configured correctly. If authentication fails, verify the metadata, SAML attributes and assigned users in Google Workspace.

↑ Back to top

Configure Role Mapping (Optional)

Edge Control supports optional role mapping using SAML attributes. Role mapping allows users to be automatically assigned the appropriate permissions when they authenticate through Google Workspace.

Configure the required role attributes within the Google Workspace SAML application, then configure the corresponding mappings in Edge Control.

Configure role mapping

Save the configuration and test authentication using a user account that has been assigned the appropriate Google Workspace group or role.

Note: If role mapping is not configured, users will authenticate successfully but may need to have permissions assigned manually within Edge Control.

↑ Back to top

Related articles