Single sign-on (SSO)

Guava supports single sign-on through SAML 2.0. Once SSO is enabled for your email domains, everyone with an email address on those domains signs in to the Guava dashboard through your identity provider (IdP). Email codes and Google sign-in are disabled for those addresses. To sign in, users enter their work email on the Guava sign-in page and are redirected to your IdP. Users can also sign in by launching Guava from your IdP’s dashboard.

​

Okta

​

Create the app integration

In the Okta Admin Console, go to Applications > Applications and click Create App Integration. Select SAML 2.0 and click Next.

​

Configure general settings

Enter Guava as the App name. Click Next.

​

Configure SAML

Enter the following settings, leaving everything else as its default: Attribute statements are not required. Click Next, then click Finish.

​

Assign users

On the app’s Assignments tab, click Assign and assign the people or groups who should have access to Guava.

​

Send us your metadata URL

On the app’s Sign On tab, find Metadata URL under SAML 2.0. Send your metadata URL to your Guava account executive, along with the email domains to enable SSO for.

​

Google Workspace

​

Create the SAML app

In the Google Admin Console, go to Apps > Web and mobile apps and click Add app > Add custom SAML app. Enter Guava as the App name and click Continue.

​

Download IdP metadata

On the Google Identity Provider details page, click Download metadata to save the IdP metadata XML file. Click Continue.

​

Configure service provider details

Enter the following settings, leaving everything else as its default: Click Continue. Attribute mappings are not required. Click Finish.

​

Enable user access

Open the Guava app in the Google Admin Console and click User access. Enable the app for the organizational units or groups who should have access to Guava. Click Save.

​

Send us your metadata XML

Send the IdP metadata XML file you downloaded earlier to your Guava account executive, along with the email domains to enable SSO for.