How to set up and link Google SSO for iplicit users?

This article covers how to set up Google SSO for iplicit and how individual users link their iplicit account to their Google account.

Setup happens in two places: the iplicit environment defaults (where Google is enabled as an SSO provider), and the Google Admin Console (where third-party SSO is permitted). Each user then links their iplicit account to their Google account the first time they log in via Google.

Bulk linking is not available for Google SSO

There is no option to bulk-link, automated linking, or mass-import for Google SSO. Each user must link their iplicit account to their Google account individually on first login.

• There is no tenant ID, object ID, or SSO token required for Google in iplicit. When Google is selected as the provider, no additional fields are presented in the admin setup
• Because there are no identifiers to map against, users cannot be linked in bulk
• For new iplicit environments, users link individually on first login. For existing environments adopting Google SSO, every existing user will need to log in via Google once to complete the link
• If bulk linking is a critical requirement, Microsoft Entra is the better identity provider fit.

Setting up Google as an SSO provider in iplicit

Google must be enabled as an SSO provider in environment defaults before any user can link their account.

1. Open environment defaults in iplicit
2. Locate the SSO providers section
3. Enable Google as an SSO provider
4. Save the changes.

No tenant ID, object ID, or SSO token is required. When Google is selected as the provider, no additional fields are presented for completion.

Configuring the Google Admin Console for third-party SSO

Google's own security settings must permit third-party SSO using user email accounts. These are configured by your Google administrator, not in iplicit.

• Confirm with your Google administrator that the relevant Google Admin Console security settings allow third-party SSO using user email accounts
• Confirm any two-step verification policies your organisation enforces, as these will apply during iplicit login
• Settings vary by Google Workspace edition - consult Google's documentation for the exact location of these controls.

How a user links their iplicit account to Google on first login

Each user links their iplicit account to their Google account the first time they log in using Google SSO.

1. The user navigates to the iplicit login screen
2. The user logs in using their email address and password set up on their user account
3. The user completes any two-step verification prompts required by Google security policies
4. Once authenticated, the user's iplicit account links to their Google account automatically.

The link persists for subsequent logins. The user will not need to repeat this process.

How a user verifies the link from their iplicit profile

After linking, users can confirm the link is in place from their iplicit profile.

1. Select the profile icon at the top-right of iplicit
2. Choose 'Security'
3. Review the sign-in and MFA methods listed against the account.

If the account is linked, Google will appear as an active sign-in method. If the link did not complete on first login, the user can complete the linking process from this screen, provided Google is enabled as an SSO provider in environment defaults.