Submit a ticketCall us

whitepaperYour VM Perplexities Called, and They Need You to Read This.

Virtualization can give you enormous flexibility with future workloads and can be a key enabler for other areas, like cloud computing and disaster recovery. So, how can you get a handle on the performance challenges in your virtual environment and manage deployments without erasing the potential upside? Learn the four key areas you need to be focusing on to help deliver a healthy and well-performing data center.

Get your free white paper.

Home > Success Center > Web Help Desk (WHD) > WHD - Knowledgebase Articles > How to log in to Web Help Desk using Google G-Suite

How to log in to Web Help Desk using Google G-Suite

Updated February 4, 2019

Overview

This article explains how to create a Google App application in Google G-Suite to enable all users to log in to Web Help Desk using their Google App and single sign-on.  

Environment

  • Google G-Suite
  • All Web Help Desk versions

Steps

Set up your custom SAML application in the Google Admin Console

See Set up your own custom SAML application on the Google Support site to create a custom SAML app to log in to Web Help Desk using SSO (© 2019 Google LLC, available at https://support.google.com/, obtained on February 1, 2019).

When you set up your custom SAML app, use the following settings:

  • When you set up your Google idP information, click Download in Option 1.
  • When you complete the basic information for your custom app, enter WHD as the application name.
  • When you enter your service provider information: 
    • Enter the following URL for the ACS URL and Entity ID:
      https://<domain>/helpdesk/WebObjects/helpdesk.woa
    • In the Name ID field, select Basic Information and Primary Email.
    • In the Name ID Format field, select UNSPECIFIED. 
  • Do not add any changes to Attributive Mapping.

When you turn on SSO to your new SAML app, use the following settings:

  • In the Google Admin Console:
    • Locate the WHD app and change the certificate setting to On for everyone. 
    • Click the WHD icon, click the Edit icon in the top right corner, and copy the URL. The format should be:
      https://accounts.google.com/o/saml2/initsso?idpid-xxxxxxxxx&spid=xxxxxxxxxxxx&forceauthn=false
      where xxx equals your unique values. 

Set up your Web Help Desk Administrator Console

Disable LDAP synchronization

  1. Log in to the Web Help Desk Administrator Console as an administrator.
  2. Click Setup > Clients > AD / LDAP Connections.
  3. Click the appropriate connection or create a new connection. 
  4. Click the Edit edit-icon.png icon.
  5. In the Connection Basics tab, uncheck Enabled, and then click Save.
    enable-no.png

Link Web Help Desk to Google Apps

  1. Click General > Authentication.
  2. Click the Authentication Method drop-down menu and select SAML 2.0.
    authentication-method.png
  3. In the Sign-in page URL, paste the URL you copied in the Google Admin Console when you turned on SSO. 
    sign-in-page-url.png
    For example:
    https://accounts.google.com/o/saml2/initsso?idpid-xxxxxxxxx&spid=xxxxxxxxxxxx&forceauthn=false

    where xxx equals your unique values.

  4. Next to Verification certificate, click Upload.
    verification-certificate.png
  5. Locate and select the certificate you downloaded when you set up your custom SAML app. 
  6. Click Save.

Update the client user names

Google G-Suite does not recognize the username or SAM-Account-Names format used in Web Help Desk—only email addresses. As a result, change the user names of all clients in the Web Help Desk Administrator Console from user names to full e-mail addresses. 

  1. In the console, click Clients.
  2. Change the user names to their corresponding email addresses.
  3. Save your changes.

Re-enable LDAP synchronization

  1. In the Web Help Desk Administrator Console, click Setup > Clients > AD / LDAP Connections.
  2. Click the appropriate connection. 
  3. Click the Edit icon.
  4. In the Connection Basics tab, select Enabled.
    enabled-yes.png
  5. Click Save.

Update the attribute mappings

  1. Click the Attribute Mappings tab.
  2. Click the Edit edit-icon.png icon.
  3. In the Schema row, select Custom and enter account in the field.
    schema-field.png
  4. In the Username Attribute field, enter mail.
    username-attribute.png
  5. In the Name Attribute(s) row, enter givenName in the First Name field and sn in the Last Name field.
    name-attributes.png
  6. In the E-Mail Attribute field, enter mail.
    email-attribute.png
  7. Click Save. 

 

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.  You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.

 

 

Last modified

Tags

Classifications

Public