SSO - Google Workspace Setup Guide

This guide walks you through configuring Single Sign-On (SSO) between Google Workspace and RollCall using SAML 2.0.

Overview

By completing this setup, your users will be able to:

• Log into RollCall using their Google Workspace credentials

• Avoid managing separate passwords

• Experience a secure and seamless login process

? Before You Begin

Make sure you have:

• Admin access to Google Admin Console

• Access to the RollCall SSO Setup Wizard

• Your school’s RollCall domain (e.g. schoolname.rollcall.com.au)

⚙️ Step-by-Step Configuration (Google Workspace)

Step 1 – Access Google Admin Console

1. Go to: https://admin.google.com

2. Navigate to:
   Apps → Web and mobile apps

3. Click:
   Add app → Add custom SAML app

Step 2 – Create the Application

1. Enter the app name:
   RollCall

2. (Optional) Upload a RollCall logo

3. Click Continue

Step 3 – Download Google IdP Details

On the Google Identity Provider details screen:

1. Click Download Metadata

2. Take note of:

   • SSO URL

   • Entity ID

? You will use this information in the RollCall SSO setup wizard.

Step 4 – Configure Service Provider Details

In the Service Provider Details section:

? These values are available in the RollCall SSO setup wizard.

Step 5 – Configure Attribute Mapping

Map the following attributes:

? These mappings ensure users are correctly identified and created in RollCall.

Step 6 – Enable the Application for Users

1. After saving the app, go to User Access

2. Turn the app ON for:

   • All users
     or

   • Specific groups (recommended for testing)

? Recommended for testing:
Enable access for a small test group first

Complete Setup in RollCall

Once Google Workspace is configured:

1. Open the RollCall SSO Setup Wizard

2. Upload your metadata file

3. Confirm attribute mappings

4. Run a Test Login

5. Click Activate SSO

Testing the Integration

Before going live:

• Use a test account

• Confirm:

  • Successful login via Google

  • User is matched correctly in RollCall

❗ Troubleshooting Tips

? Key Notes

• RollCall uses email address to identify users

• SSO must be activated after testing

• Each school’s configuration is secure and isolated

✅ Summary

By completing this setup:

• Users log in via Google Workspace

• Authentication is handled securely via SAML

• Admins maintain control via Google Admin Console

Here to link to:

• SSO - Setting up your SSO Integration