Google Workspace

LogScale can integrate Google Workspace for identity and access management. You will learn detailed steps for configuring SAML-based single sign-on. For cloud customers, the integration process requires working with Support to complete the configuration while following specific requirements for security controls and permissions.

Google Workspace is a suite of cloud-based productivity and collaboration tools offered by Google. It can be used to access your LogScale repositories.

Prerequisites to configure LogScale single sign-on with Google Workspace

Prior to configuring Google Workspace for authentication with LogScale make sure to have the following:

Configure Google Workspace to use with LogScale

To integrate Google Workspace with LogScale, two main operations are required:

  1. Get metadata from Google Workspace

  2. Set up LogScale IDP configuration

Get metadata from Google Workspace

  1. Sign in to the Google Workspace as an administrator. Then in the settings type SAML in the search box. Click Set up single sign-on (SSO) for SAML applications.

    Screenshot of the Google Workspace Admin Console search interface showing search results for 'SAML'. The 'Set up single sign-on (SSO) for SAML applications' option is highlighted, which is the entry point for configuring SAML authentication for LogScale integration.

    Figure 75. Searching for SAML Setup in Google Workspace Admin Console


  2. Copy the SSO URL and Entity ID.

    Screenshot of the Google Workspace SSO configuration page displaying the Identity Provider details. The image shows the SSO URL and Entity ID fields that need to be copied for LogScale integration, which are critical pieces of information required for establishing the SAML connection.

    Figure 76. Locating SSO URL and Entity ID in Google Workspace


  3. Scroll down and copy the certificate data.

    Screenshot of the Google Workspace SSO configuration page showing the certificate data section. The image displays the X.509 certificate information that needs to be copied for LogScale integration, which is required for secure authentication between Google Workspace and LogScale.

    Figure 77. Accessing X.509 Certificate Data in Google Workspace


Configure LogScale to use Google Workspace

When Google Workspace is configured to work with LogScale, you must configure LogScale to work with Google Workspace.

To configure Google Workspace to work with LogScale, navigate to the configuration files and set the configuration variables as shown below using the the SAML Google Workspace settings as described in Configure SAML for LogScale Self-Hosted.

ini
AUTHENTICATION_METHOD=saml
PUBLIC_URL=http://localhost:8080
 
SAML_IDP_SIGN_ON_URL=
 
SAML_IDP_ENTITY_ID=
 
SAML_IDP_CERTIFICATE=
 
AUTO_CREATE_USER_ON_SUCCESSFUL_LOGIN=true
PERMISSION_MODEL_MODE=advanced
EMERGENCY_USERS=true

Test the Google Workspace integration setup

Once all of the necessary steps to set up the Google Workspace authentication for LogScale are completed, you need to test the setup.

  1. Go to a Terminal and start LogScale with the following command:

    shell
    ./run.sh

    Allow two to three minutes for LogScale to start.

  2. Connect to localhost in a browser. It should redirect you to a Google Workspace login.

  3. Sign into Google Workspace. You should be taken to LogScale.