How to configure Google SSO

1. From your Google Workspace Admin Console, click Apps > Web and mobile apps
2. In the Apps panel click the Add app drop-down, choose “Search for apps” and type “Miro”
3. Choose “Miro Web (SAML)” and click Select
4. In the “Google Identity Provider details”, under Option 2 verify that “SSO URL”, “Entity ID”, and “Certificate” are all filled in, then click Continue. You will copy these values later when you configure Miro
5. In the “Service provider details”, add the following values:
   ACS URL: https://miro.com/sso/saml
   Entity ID: https://miro.com/
   Start URL: blank
   Signed response: leave unchecked
   Name ID: EMAIL
6. Click Continue
7. In “Attribute mapping” under “Google Directory attributes” choose First Name, then choose Last Name, making sure they map to the App attributes
8. Click Finish. You will now see your Miro app added to Google Workspace
   Setting up Google SAML identity provider

1. Open an Incognito tab in your browser and log into the Miro dashboard (miro.com/app/dashboard) 
2. Click your avatar in the top-right corner and click Settings
3. From your Company settings, click Authentication. If you are a Business plan customer, this setting is in Security. 
4. Click the toggle to “Turn on SSO to set up SCIM provisioning”
5. You will be taken to the Authentication section of Company settings. Click the SSO/SAML toggle. You will be prompted to click Turn on to enable SSO for your organization
6. For the SAML Sign-in URL, return to your Google Workspace Admin Console and within the Miro app, click DOWNLOAD METADATA. This panel gives you the option to copy the values needed
7. Under SSO URL, click the Copy button. Go back to Miro and paste the value in SAML Sign-in URL
8. Repeat this process for Key x.509 Certificate using the Certificate in Google
9. Add your Domain information. Ensure you’ve already set up and verified your domain
10. Click Save
    Configuring SSO authentication settings in Miro

1. Return to the Google Workspace Admin Console
2. If needed, click Web and mobile apps from the Apps menu and select Miro
3. Click User access
4. Click ON for everyone and click Save
   Turning on the Miro app for all users

If you’d like to turn on Miro for specific organizational units, click the group in the Organizational Units first, then click ON. You may need to click OVERRIDE or INHERIT additionally.

1. In the Google Workspace Admin Console, launch the Miro app if needed
2. In the Miro section, click TEST SAML LOGIN
3. A new tab should appear with Google SSO sign-in options
   [GIF]
4. To test authentication in Miro, open a new Incognito tab and launch the Miro dashboard (miro.com/app/dashboard) 
5. You should see a sign-in page. Click Sign in with Single Sign On and login with your account credentials.
   Testing Google SSO authentication with Miro

Alternatively, you can test in Miro:

1. Complete the steps above to configure your SSO settings.
2. Click the Test SSO configuration button.
3. Review the results:
   1. If no issues are found, a confirmation message SSO configuration test was successful will be displayed.
   2. If issues are found, a confirmation message SSO configuration test failed will be displayed, followed by detailed error messages to guide you on what needs to be fixed.
   Test SSO configuration from Miro