Amplitude provides a single sign-on integration with G Suite for customers on the Enterprise plan.
For general information about SSO see the primary article.
In order to setup SSO:
- You must be an org admin for your organization in Amplitude.
- You must be an administrator for your G Suite organization.
- You must configure your own SSO settings, which is enforced when logging into your org.
Then follow these setup steps:
-
Go to the Apps section in the G Suite admin console and select "SAML apps".
-
Click the + button in the bottom left to add a SAML app.
-
In the popup click the option to create a custom app.
-
Download the IDP metadata.
-
Upload the metadata file in Amplitude under Settings > ORG SETTINGS > Single Sign-On or download it from a URL, then save the changes.
-
Go back to G Suite and continue through the app creation. Enter a name and description and optionally upload the logo (attached to this article) for easy recognition.
-
On the next step you will be prompted for the "ACS URL" and "Entity ID".
-
You can find the Entity ID and Assertion Consumer Service URL in the Amplitude SSO settings under Settings > ORG SETTINGS > Single Sign-On:
-
On the final step in Google Admin, click "Finish" to save the app and enable SSO.
Note:
You can review information regarding Just In Time (JIT) Provisioning settings for G Suite administration at cloud.google.com/identity/solutions/automate-user-provisioning.