Integrating with Google SAML

Overview

QueryPie supports user integration through SAML 2.0 for Google users. You can grant access permissions and apply policies by synchronizing users.

SAML Configuration in Google Workspace

1. Access the Google Admin Console homepage and click Apps > Web and mobile apps in the left menu.

2. Click the Add App button and then click Add Custom SAML App.

3. This is the step 1 page for entering app details. Enter ‘QueryPie-SSO’ in the App Name field and click the Continue button.

4. On the step 2 page, enter the following values. After entering, click the Continue button to proceed to step 3.

• ACS URL : https://{QueryPie Host}/saml/sp/acs
• Entity ID : https://{QueryPie Host}/saml/sp/metadata
• Start URL (Optional) : https://{QueryPie Host}/

5. On the step 3 page, click the Add Mapping button, enter all four values below, and click the Finish button.

• Basic Information : Primary email → email
• Basic Information : First name → firstName
• Basic Information : Last name → lastName
• Basic Information : Primary email → loginId

6. Enter your Google authentication password and click Next to complete creation.

7. When creation is successfully completed, the newly added app will be displayed in the list as shown below. Click on the app to enable it.

8. In the app details, click Download Metadata to download the file, then click the User Access item.

9. Select ‘Enable for all users’ in Service Status and click the Save button.

Configuring Authentication Method in QueryPie

1. Navigate to QueryPie Admin > General > User Management > Authentication menu and configure as follows.

• Type : Select SAML.
• Identity Provider Metadata : Open the file (GoogleIDPMetadata.xml) downloaded from the Google Admin Console homepage, copy the content, and paste it here.
• Click the Save Changes button to complete the setup.

SAML Login in QueryPie

Now you can authenticate with Google and log in to QueryPie through the Login with SAML button on the login page.