Google (SAML)
| Who is this for? | Required permissions and licenses |
|---|---|
| • Administrators who manage company authentication. | • Administrator rights on your Leexi and Google accounts. • License required: depending on your plan, check availability in Settings > Integrations. |
How to use it
Create a new Google SAML application
Go to admin.google.com. In the sidebar, click Apps > Web and mobile apps.
Click the Add app dropdown menu, then Add custom SAML app.
Name the application
Give the application a name (for example Leexi SSO). You can optionally add a description and a logo, then click Continue.
Retrieve the metadata and import it into Leexi
Click Download Metadata: a GoogleIDPMetadata.xml file is downloaded. Import it at https://app.leexi.ai/en/settings/security.
Fill in the ACS URL and Entity ID
- ACS URL: enter Leexi's reply URL (Reply URL / ACS URL)
https://api.leexi.ai/users/sso/consume. - Entity ID: enter Leexi's Entity ID.
- Name ID format: select EMAIL.
Then click Continue then Finish. The SAML application is configured.
Assign users to the application
If you use Google Workspace organizational units, follow your usual process. Otherwise, the simplest way is to click the chevron to the right of User access, select On for everyone, then Save. Allow about a minute for the change to take effect, as Google Workspace doesn't propagate permission updates immediately.
SSO is now configured: your users can sign in with their Google credentials.
Going further
Enforce SSO login (optional)
After the steps above, users in your workspace can still sign in with email/password or already via SSO. Once all users have been onboarded and have successfully signed in via SSO, you can enforce SSO across your entire workspace. Only Leexi has the authority to disable this setting, to prevent any unwanted behavior.