Set up SSO for GSuite (SAML)

• Only Admins can use this feature

Setting up a new SSO  integration for GSuite with SAML

You need to be an Admin for TravelPerk and GSuite to configure a new SSO integration following these steps:

1. Go to Account Settings
2. Select Integrations
3. Find the SSO integration and click Set up
4. Select SAML and click New integration

Once you've created a New integration, you'll need to configure it:

1. Open your Google Admin Console and go to Apps 
   
   
2. Select SAML Apps
   
   
3. Click Add App and select Custom SAML App
   
   
4. Give your new SAML app a name and add the configurations for your new SAML App as follows:

Your GSuite configurations for TravelPerk

1. Copy the SSO URL and paste it in the IdP SSO service URL on TravelPerk
2. Copy the Entity ID and paste it in the IdP entity ID on TravelPerk
3. Copy the Certificate and paste it in the x509 cert on TravelPerk
4. On your Google Admin Console, click Continue
   
   
   

TravelPerk configurations for your GSuite

1. Copy the SP Assertion Consumer Service URL and paste it in ACS URL on your Google Admin Console
2. Copy the SP entity ID and paste it in the Entity ID on your Google Admin Console
3. Optionally you can set the StartURL with the following format: https://{yourcompanyname}.travelperk.com
4. Make sure that:
   • the Signed response box is checked
   • the Name ID format is EMAIL
   • the Name ID is Basic information > Primary email
5. Click Continue
   
   
   
   
6. The Attributes must be exactly the same as the following table, including capital letters and punctuation
   

   Google Directory Attributes	App Attributes
   First Name	User.FirstName
   Last Name	User.LastName
   Primary Email	User.email

   

7. Click Finish
8. On TravelPerk, click Create integration

Note: You need to configure the User Access from GSuite to choose who can access TravelPerk, as it is OFF for everyone by default. 

For more information about customizing your SSO settings, see Customize SSO settings.