Product: Huntress SAT: SSO and SAML
Environment: Google Suite/SAT Portal
Summary: This article outlines how to integrate Google SSO with SAT to provide your learners with a fast and secure way to access the SAT platform.
Create a Custom SAML app in the Google Admin Console
1. Log in to your Google admin account
2. Select Apps dropdown, then select Web and mobile apps
3. Select the Add app dropdown, then select Add custom SAML app
4. Under App name, input “SAT”
5. Add whatever description you prefer; in the screenshot, we used “Sweet Training”
6. You can add an App icon if you like. The SAT App Icon is provided below.
7. Click Continue
8. Scroll down to Option 2: Copy the SSO URL, entity ID, and Certificate, and Copy the Google SAML Certificate.
9. Click Continue, then proceed to “Add App Credentials to SAT”
Add App Credentials to SAT
1. Open a new tab and log in to your SAT Admin account, select the appropriate organization, then navigate to the Settings tab.
2. Select Learners from the menu on the left, then scroll down to the Groups section and click 'Edit' next to the group that you want to use SSO.
3. Select the Access tab, then next to the Authentication Type section, use the drop-down under Type to select SAML Single Sign-on
4. Paste the Certificate you copied earlier in step 8 in the box “New identity Provider x.509 Certificate field. Return to the Google App (in the same area where you copied the certificate) and copy the SSO URL. Paste the SSO URL into the Identity Provider Single Sign-on URL box, then click Update.
The Use Metadata URL for setup button can be ignored and should remain Disabled.
5. Copy the URL under Service Provider Sign-in URL (assertion), then head back to the Google App
6. Paste the URL copied from SAT into the ACS URL and Entity ID fields
7. Under Name ID format, use the drop-down and select EMAIL
8. Click CONTINUE
9. We do not need to add any Attributes so click FINISH
10. In the SAT APP screen, click where it states OFF for everyone to change this to ON for everyone, then click SAVE
Now that you have successfully set up SAT SAML, let’s test the configuration by signing in as a new user using the new SAT SAML application.
Testing the Application
Any user in your organization can test by logging in to their Google account and then clicking the Google Menu (9 dots in the top right corner of the screen) to select the SAT SSO/SAML icon to log in directly to MyCurricula.
Your Google SSO/SAML SAT integration is now complete!
--