Contact Support

Google Workspace SAML Integration

Integrate Google Workspace with Verkada Command for SSO

Verkada Command has the ability to integrate with Google Workspace (among other Identity Providers [IdPs]) for single sign-on (SSO) scenarios. ​ Security Assertion Markup Language (SAML) handles the authentication side of things to allow Google Workspace to be used to manage access to Command.

Before you begin

1

Ensure you have already registered on Verkada Command and an account exists for the user in the same custom domain. You can add Command as a custom application.

2

Familiarize yourself with these terms to maximize your integration:

  • Client ID—Client ID. To locate, go to Admin > Privacy & Security > Single Sign-On Configuration > Add New.

  • Federation Data XML—The unique information from your Google Workspace instance that allows Verkada to set up the federation between Google Workspace and your Command instance (the steps to download this are provided later).

Google Workspace Configuration

1

Go to Google Workspace > Google Admin dashboard and select Web and mobile apps.

2

Select the Add app dropdown and select Add custom SAML app.

3

Fill in the application information; you can use any name and description.

4

Get the Verkada Command logo to add to your Google Workspace application.

5

Click Continue.

​

6

Use Option 1 to download the IdP metadata that corresponds to the federation metadata Extensible Markup Language (XML) and click Continue.

Note: This file allows Verkada to configure SSO in Command. Save it in a convenient location for future use.

7

Type the service provider details (as shown) to configure SSO or, you can copy the details from the New SSO Configuration page (in Verkada Command), and click Continue.

a. For ACS URL: For US orgs: https://vauth.command.verkada.com/saml/sso/ For EU orgs: https://saml.prod2.verkada.com/saml/sso/For AUS orgs: https://saml.prod-ap-syd.verkada.com/saml/sso/%3Cclient-ID%3E b. For Entity ID: For US orgs: https://vauth.command.verkada.com/saml/sso/ For EU orgs: https://saml.prod2.verkada.com/saml/sso/For AUS orgs: https://saml.prod-ap-syd.verkada.com/saml/sso/%3Cclient-ID%3E c. For Start URL: For US orgs: https://vauth.command.verkada.com/saml/login/ For EU orgs: https://saml.prod2.verkada.com/saml/login/For AUS orgs: https://saml.prod-ap-syd.verkada.com/saml/login/

​Note: Refer to where your organization was created to confirm which region your organization is located.

8

Fill in the Attributes mappings (as shown below) and click Finish. This ensures that Command receives the correct information about the user. You should be redirected to the app configuration page.

​

Command Configuration

1

In Verkada Command, go to All Products > Admin .

2

Select Login & Access > Single Sign On (SSO).

3

Click Add to start a new configuration or to edit an existing configuration.

4

Under Identity Provider XML Metadata, upload your metadata file.

5

Under Email Domains, add the email domains that will be used to log in to your organization.

6

Verify that you can access Command at one of these URLs (substitute the client-id with the one used during setup).

7

You’ll be redirected to the Google Workspace app configuration page to complete the login.

Log in via the mobile application

Command on Android and iOS supports login through SAML.

1

In the email address field, type the user’s email and click Next.

2

You should be redirected to your IdP (Google Workspace) to complete the login process.

Need more help? Contact Verkada Support.

Last updated

Was this helpful?