📕Google Integration

Prerequisites

In order to configure Google SSO integration with Ludi you will need:

• Admin access to your Ludi account.

• Admin access to your organization's Google account.

• One or more authorized domains adding to your Ludi account (see end of article).

• A note of your organizations Ludi Account ID.

How to find your Ludi Account ID

Before you begin, you will need your organization's 12 character Ludi Account ID. You can find this in the under the management menu within Ludi: https://ludi.co/manage

Ludi Account ID

Integration Setup

From within the Google dashboard, choose Apps > Web and Mobile Apps from the left hand navigation. Then, click Add App and choose Custom SAML App.

Step 1 - App details

Set the name as Ludi and optionally add an icon. We recommend using this image as the icon: https://s.ludi.co/site/logo/logo-padded.png

Click Continue.

Step 2 - Google Identity Provider details

Here we will configure Ludi with the settings it needs to communicate with the Google IDP service. To do this, open a new tab/window in your browser and go to https://ludi.co/manage/security/sso.

Copy the settings from the Google screen into Ludi as follows:

• For "Entry Point" use the "SSO URL" value

• For "Issuer" use the "Entity ID" value

• For "Certificate" use the "Certificate" value (note will be quite large).

Once copied, click Save.

Values in Google

Values in Ludi

Back on the Google page, click Continue.

Step 3 - Service provider details

On this screen we configure the Google side with the configuration it needs to communicate with Ludi.

Input the following settings:

• For "ACS URL" use https://ludi.co/login/saml

• For "Entity ID" use your Ludi Account ID (see above on where to find this).

• Leave all other settings as their defaults.

Click Continue.

Step 4 - Attribute mapping

The final step is to configure which profile values Google will send to Ludi. We need to map three of these:

• "First name" should be mapped to firstName

• "Last name" should be mapped to lastName

• "Email name" should be mapped to email

Required Attribute Mappings

Click Continue to complete the setup wizard.

Step 5 - Grant access

Depending on how your organization is configured, it's likely that Ludi will be OFF for all users by default. You can control which users have access to the app via the User Access screen available from inside the App information panel. The easiest way to configure this is to set the app ON for everyone.

Step 6 - Configure domains

If you have not already had your authorized domains configured by a Ludi team member, please contact us on Intercom or at [e-mail] to set these up. The domains must include all domains that your team will login from.