How To: Enable Google SSO/User Import

In order to maintain an up-to-date catalog of users, and improve security and access, Oomnitza integrates with GSuite for both SSO and User Import Purposes.

To set up this integration:

1. Log into Oomnitza and Navigate to the Settings on the main navigation bar. This will take you to Oomnitza's Settings Page. 
2. Scroll down the the SSO Integrations section, and Select GSuite:
   
3. This will take you to a GSuite Landing Page. When you're ready to set up the integration, select next to be taken to the Setup Page:
   
4. From here, enter Google Apps domain (companyname.com) and set whichever options you’d like, then click “Finish".
   • Enable User Import - this allows you to import a list of all Google Apps users into Oomnitza so that they can have assets assigned to them
     • With this option selected, you'll also be given access to "Schedule Rule" which lets you set the frequency for automatic imports.
   • JIT Provisioning - this allows a new user account to be created in Oomnitza when valid Google Apps users authenticate via SSO.  This is unnecessary if “Enable User Import” is enabled.
   • SSO only - this prevents standard authentication to Oomnitza and forces authentication to be handled by Google.  I suggest leaving this off for now until you have tested the SSO feature and verified it works correctly.
   • Default Role - this is the Oomnitza role that imported or JIT provisioned users will be assigned at the time their account is created.
   • Username Format: The format which Users' Usernames are created, as such:
     

5. You can log out of Oomnitza now and click the Google Apps icon at the login screen to test Google Apps SSO

 

6. To import your Google Apps users, go to the People section, click the Import link in the bottom-right of the page, select “Import via Google Apps”.

 

Feel free to contact [e-mail] if you have any questions.