How to set up Google Workspace SSO for MATs

Summary

• Sign in to the Google Apps Administration Site with an administrator account.
• Choose ‘Add app’ then ‘Add custom SAML app’ in ‘Web and mobile apps.’
• Download IdP Metadata and contact Product Support.
• Populate ACS URL and Entity ID as per your region.
• Map attributes: First name, Last name, Primary email, with identification option.
• Enable SAML app for all users in the Expand panel.
• Submit your SSO onboarding form to complete setup.

Preparation for SSO integration

Google Workspace SSO integration allows multi-academy trusts to securely manage access to ClickView. Complete each step below using the exact UI labels as instructed.

Integration steps

1. Sign in to your Google Apps Administration Site using an administrator-level account.
2. In the left panel, select Apps and then Web and mobile apps.
   
3. Choose Add app then Add custom SAML app.
   
4. Enter the Application Name (e.g. ‘ClickView’) and optional App Icon, then click Continue.
   
5. Choose Option 1 and Download IdP Metadata. Contact Product Support and provide the GoogleIDPMetadata.xml file. Then click Next.
   
6. In the next screen, fill in the ACS URL and Entity ID for your region as follows, then press Continue:
   • ACS URL: https://saml-in3.clickview.co.uk/Shibboleth.sso/SAML2/POST
   • Entity ID: https://saml-in3.clickview.co.uk/shibboleth
     
7. In Attribute mapping, enter mappings for First name, Last name, and Primary email address.

User and school identification options

To identify user role and school, only one option is required. You may reuse the same method for both year group and institution mapping.

Option I: Organisation unit path

1. In SAML attribute mapping, map the Organisation unit path.
   
2. Access https://admin.google.com with an admin account.
3. Navigate: Menu (☰) → Directory → Organisational Units.
   
4. Select the lowest level for your desired year or staff group.
   
5. Click the + to show the ‘Parent organisational unit’, then copy the full path.
   
6. Paste these values in the SSO onboarding form for each year and staff group.

Option II: Google groups

• In SAML attribute mapping, scroll to Group membership (optional) and search for the desired groups.
• Enter the ‘App attribute’ value as ‘Department’. Click Save.

Option III: Using Department field

1. In SAML attribute mapping, add Department

Enable SAML app for all users

1. Once the SAML App is added, go to Expand panel, change setting from OFF for everyone to ON for everyone, and press Save.
   
   
2. Note it may take up to 24 hours for changes to apply across all users.

Submit the SSO onboarding form

Complete your integration by submitting the SSO onboarding form.

Frequently asked questions