Single Sign-On (SSO) with Google Workspace^™

First, we need to configure a new SAML app in your Google Workspace^™ admin console and download the Identity Provider Metadata to make configuring SmartDraw SSO easier.

1. Go to the Google Admin Console website (admin.google.com) and sign-in with your Google Workspace^™ admin credentials.
2. Go to the home page (Main menu -> Home) and click Apps.
3. Select Web and mobile apps on the left panel.
4. Click Add App then Add custom SAML app.

Provide a unique name for app, we suggest SmartDraw SSO.

As the last step, download the metadata to your Downloads folder.

To complete the SSO configuration, we need to import the metadata file you downloaded and connect the entity URL from Google to your SmartDraw license.

1. Login to your account at https://www.smartdraw.com/myaccount
2. Click on Licenses and Subscriptions.
3. Click on the license key you want to set up SSO for.
4. From the Identity Management section click on "Single Sign-On."

Import Your SAML Metadata

Download your SAML XML metadata file from Google or get your metadata URL. You can import either the file or copy-paste their URL into SmartDraw. Click on "Import SAML Metadata from your Identity Provider" and upload your file or link to your URL.

Verify and Activate SSO

SmartDraw will process your imported data automatically. Make sure your domain and SAML issuer URL look good and click Save Configuration to enable Single Sign-On.

You're now ready to test your set up.

When you're ready to fully enable SSO for every user, make sure you check Publish to All Users and save your settings.

This toggle lets you check your SSO set up before users see it. You can turn it on an off as you need to test things, but it needs to be checked for your users to be able to use SSO with SmartDraw.

Once the configuration is saved, you'll notice that SSO is marked as "Enabled" on the license's home screen. You can modify this configuration at any time or turn off SSO if you wish.

Return to the Google Admin Console and in the "Service Provider Details" section, enter the following information:

1. Copy and paste the ACS URL from your account: https://cloud.smartdraw.com/sso/saml/login/[your-google-workspace-primary-domain]
   • This is the link we recommend you email your team after completing the setup
2. Enter this under the Entity ID: https://www.smartdraw.com/
3. Verify "Basic Information > Primary Email" is selected under Name ID
4. Click "NEXT".
5. Add 3 attribute mappings.
   • Primary email -> email
   • First Name -> firstName
   • Last Name -> lastName
6. Click "Finish".

From the Google Workspace^™ Admin Console

1. Click "Apps" and "Web and mobile apps" in the left panel.
2. Click the custom app "SmartDraw SSO" created earlier.
3. Click the "TEST SAML LOGIN" option to test the SSO cycle.

From a Web Browser

1. Open your web browser and enter your SSO URL. This will be: https://www.smartdraw.com/sso/saml/login/[google-workspace-domain]
2. Enter your Google login information