Integrating Clari with Google SAML/SSO
Overview
Clari supports single sign-on (SSO) using SAML 2.0 compliant third-party providers such as Google. This document specifies the steps needed to enable Google SSO for your enterprise.
Your company's Google admin should follow the steps below.
Prerequisite
First, as a prerequisite step, send a support ticket to request your company's Entity ID and Single Sign-On URL to enable Google SSO. Once you have these details, proceed with these instructions.
How to Configure Custom SAML App in Google
-
In the Admin console, go to Menu > Apps > Web and mobile apps.
-
Click Add App > Add custom SAML app.
-
On the App Details page:
-
Enter the name of the custom app: Clari New
- Upload an app icon (download the logo here)
-
Click Continue.
-
In the Service Provider Details window, enter:
-
ACS URL: Enter https://login.clari.com/sso/saml2
-
Entity ID: Enter the value provided by Clari in the support ticket
-
The service provider supplies all these values.
-
On the Attribute mapping page, click Add another mapping to map additional attributes.
Note: You can define a maximum of 1500 attributes over all apps. Because each app has one default attribute, the total number includes the default attribute plus any custom attributes you add.
-
Under Google Directory attributes, click the Select field menu to choose a field name.
Not all Google directory attributes are available in the drop-down list. If an attribute you want to map (for example, Manager's email) is not available, you can add that attribute as a custom attribute, which will make it available here for selection.
-
Under App attributes, enter the corresponding attribute for your custom SAML app.
-
[Required] Please ensure that you add email attribute and value as a user's email. This setting is required for SAML integration.
-
Click Finish
Once this is complete, please provide the SAML App metadata URL to the Clari team in the support ticket you created in the prerequisite ticket above.
