SSO set up steps for Google

To complete these steps you will need super administrator access to your Google administration area and your StoryBox Hub Account Holder login details.

Set up steps

1. Log in to your Google Admin console.
2. Navigate to Apps > Web and mobile apps.
3. Choose Add app > Add custom SAML app:
   
4. Fill in the App name: StoryBox Hub
5. Optional: You can download this image file to upload for the App icon.
6. Click Continue. On the next page you will see your IdP SSO URL, Entity ID URL and Certificate.
7. In a separate browser tab or window, log in to your StoryBox Account Settings as the Account Holder.
8. Still in StoryBox Hub, scroll down to Other Account Actions on the right hand side and click Configure SSO details.
9. For Identity provider choose "Google".
10. Complete the next fields as below:
    • IdP Entity ID or Issuer: Copy and paste the Entity ID URL from Google to here.
    • SAML Login URL: Copy and paste the SSO URL from Google to here.
    • X.509 Certificate: Copy and paste the Certificate from Google to here.
    • User name attribute: Email
    • First name attribute: First Name
11. Click the Update button at the bottom of the page. Keep this tab open for now.
12. Back in Google, click Continue to progress to the 3rd screen, "Service Provider details".
13. Complete the next fields as below:
    • ACS URL: Copy the ACS (AssertionConsumer Service) URL/Issuer URL from StoryBox to here.
    • Entity ID: Copy the SP-EntityID / Issuer URL from StoryBox to here.
    • Name ID format: EMAIL
    • Name ID: Basic Information > Primary email
14. Click Continue.
15. Still in Google, map the Email and First Name Attributes as below:
    • Primary email -> Email
    • First name -> First Name
      
16. Click Finish.
17. Still in Google, click the down arrow in the User access section.
18. Click On for everyone or customise access by Groups/Organizational Units.
19. Click Save.
20. You should now be ready to test the connection.

Testing steps

1. Log out of your StoryBox Hub Account Holder settings.
2. While still on the StoryBox Hub homepage, click the LOG IN button in the top right corner.
3. Click SSO.
4. Find your Organisation Name in the dropdown box. (You can edit the name that shows here in your Account Holder settings.)
5. Click LOG IN.
6. Submit user credentials for your organisation.
7. You should be redirected back to StoryBox Hub and be logged in when the page loads. If you included a First Name attribute and it is mapped correctly, you will see the first name of the user you logged in as in the top right hand corner, otherwise you will see your organisation name.
8. Mouseover that name and choose "Account Settings". If you see a page similar to the below, it means the Username attribute is mapped correctly and your SSO set up is complete:
   If you see something else, such as a prompt for the Account Holder's password, it means there is an issue with the release/mapping of the Username attribute - please see the Troubleshooting section below.

Direct login page link

If you can log in successfully, you can use this URL format as a direct link to your organisation's StoryBox Hub login page:

https://storyboxhub.com/login?sso_id=XXXX

Replace XXXX with the same number you see in your StoryBox Hub Entity ID and ASC URLs.

Troubleshooting

If you follow the steps above and experience any issues, please contact our support team with these details:

• Your identity provider's name
• Screenshots of your SAML configuration from your IdP’s admin portal
• Screenshots of any error messages
• A set of test user credentials