Using Google for SSO with Tekst

This section will show you how to set up your custom SAML application for Google.

Step 1: Create application

1. In your Google Admin console, click "Apps" from the sidebar then click Web and mobile apps from the list.

• If your application is already created, choose it from the list and move to the section Configure Application
• If you haven't created a SAML application, click Add custom SAML app from the menu.

2. Give your application an App name and click Continue.

Step 2: Configure Application​

1. On the next screen, click DOWNLOAD METADATA to download the metadata XML file, then click Continue.

Enter the following values in the Service provider details section:

Replace the values with the ones above and click Continue to save the configuration.

Step 3: Attribute Mapping

1. Configure the following attributes under the Attributes section. Click "Finish" to save the configuration.

2. From the next screen, click User access to configure the application to allow users to log in.Check the ON for everyone checkbox and click Save.

Step 4: Upload metadata to Tekst

1. Open the downloaded Federation Metadata XML file in a text editor and copy the entire contents.
2. Log in to Tekst and navigate to Settings >  SSO.
3. Click "New SSO connection"
4. Select "Google Identity Cloud" as the Identity Provider and click "Next"
5. Paste the entire raw XML contents into the "Raw Metadata" field
6. Click "Finish" to activate SSO. A success message will appear and a new "Continue with Google" button will appear on the Tekst login page.

Ensure you paste the complete XML file including the declaration. Incomplete or malformed XML will result in a parsing error.

Step 5: Switching existing users to SSO

If you have existing users who currently log in with passwords, they can switch to SSO on their first SSO login. The SSO option will appear alongside the email/password login.

For detailed instructions on transitioning users, see How to switch a user from password login to SSO.

Communicate the change to your users via email with clear login instructions. Users will see both SSO and password options until passwords are disabled.