Google Workspace

Overview

This topic explains how to configure Google Workspace to support single sign-on (SSO) in LaunchDarkly.

Prerequisites

To configure SSO for LaunchDarkly using Google Workspace, you must complete the following prerequisite:

• Configure SAML for authentication. For more information, read the Google knowledge base.

Use the table below to configure Google fields for LaunchDarkly:

Configure SSO for LaunchDarkly with Google Workspace

Before you create the LaunchDarkly app in Google Workspace, you must create LaunchDarkly-specific fields for roles, custom roles, and teams.

To configure these fields:

1. Log into Google Workspace.
2. Navigate to your user directory by clicking Directory and then Users.
3. Click the Manage user attributes icon. A popup screen appears:

4. Select Add Custom Category.
5. Name the custom category whatever you like. The example below uses LaunchDarkly Attributes.
6. Add the role, customRole, and teamKey fields:

Add LaunchDarkly as a custom SAML application

Next, you must add LaunchDarkly to your Google Workspace apps.

To add LaunchDarkly:

1. Log into Google Workspace.
2. Navigate to Apps, then SAML Apps.
3. Click the plus button to Add an app.
4. Select Setup my own Custom App to configure LaunchDarkly. The setup workflow initiates.
5. In step 2 of the workflow, copy the information from the setup workflow. You’ll need to add this into LaunchDarkly’s Security tab under Edit SAML Configuration:

6. In step 3, enter the name of the app.
7. In step 4 of the workflow, provide the Assertion consumer service URL, entity ID, and start URL for your LaunchDarkly account:

To find them, click Edit your SAML configuration on the LaunchDarkly Security tab:

8. In step 5, map the LaunchDarkly attributes firstName and lastName to Google’s “First Name” and “Last Name” basic information fields. Map the LaunchDarkly attributes role, customRole, and teamKey to Google’s “LaunchDarkly Attributes” fields of the same name. These mappings are shown below:

You’ve successfully connected LaunchDarkly to Google Workspace.

Assign roles, custom roles, and teams with Google Workspace

Now that the application is configured, you can assign roles and teams.

To assign roles and teams:

1. Log into Google Workspace.
2. Navigate to Directory, then Users.
3. Click on the Google Workspace user that you want to assign roles to and choose Account to bring up the user’s account settings.
4. Click Edit beneath “Manage user attributes” to add the user’s roles and teams to the corresponding attribute fields:

5. Click Update User.

The next time this user logs into LaunchDarkly through Google Workspace, their roles and teams will update. If this is a brand new LaunchDarkly account member, an account will be created automatically with the roles and teams you specified.