Setting up Google SSO for Bitrise

This guide provides step-by-step instructions on setting up Bitrise as a SAML application on Google G Suite.

Getting configuration information from Google ⚓

1. Sign into your Google Admin Console.
2. Select Apps.

3. In the APPS SETTINGS page, click SAML apps.

   You will see a list of the apps with their statuses (either turned on or off). On this page you can add or remove a service and enable/disable it.

4. Click the + mark in the yellow circle on the bottom right corner of the screen to add Bitrise as a SAML application to the list.
5. In the Enable SSO for SAML Application window, click SETUP MY OWN CUSTOM APP.

6. In the Google IdP Information window, copy the SSO URL and click DOWNLOAD.

   You will need the SSO URL and the content of the downloaded certificate on the Single Sign On tab of your Bitrise Organization. Then click Next on the bottom right corner.

Now that we have the config information, we will leave Google Admin Console for a minute and fill out the required SAML SSO fields on Bitrise.

Configuring SAML SSO on Bitrise ⚓

1. Go back to Bitrise.
2. Click Account Settings.
3. Click the Organization you want to add SAML SSO.
4. Click the Organization’s Single Sign On button on the left.

5. Paste the SSO URL to the Identity provider sign-on URL field. (Remember, you’ve copied this URL from the Google IdP Information window in your Google Admin Console).

   Paste the content of the downloaded certificate to the Certificate field.

   

6. Click the Copy Link button under Single Sign-On URL or copy the URL manually.

   You will need this in a minute in your Google Admin Console.

7. Click Configure SSO. Now let’s head back to your Goodgle Admin Console.

Finishing setting up Bitrise as a SAML app on Google ⚓

1. In your Google Admin Console you should see the Basic information for your Custom App window.

2. Add a name to the Application Name field. (It can be any name.)

   

3. Click Next.
4. In the Service Provider Details window, do the following:
   • Paste the copied Single Sign-On URL from Bitrise’s Single Sign On (Step 6 above) tab to the ASC URL field.
   • Type Bitrise to the Entity ID field. This time it must be Bitrise!
   • Tick the Signed Response box.

   

5. Click Next to proceed to the Attribute Mapping window.

6. Click FINISH.

   If all went well, this is what you should see:

   

Enabling Bitrise as a SAML app on Google ⚓

1. Click EDIT SERVICE.

   

2. On the Service Status page, select your Organization unit on the left.

3. Click ON to enable Bitrise’s service status.

   

4. Make sure you’re logged into Bitrise in the usual way. Use the same browser window to continue.

5. Bitrise sends a verification e-mail to all Organization members. This email contains a Sign In via SSO button and a URL. Organization members are prompted to sign in to Bitrise by clicking the Sign In via SSO button or using the provided URL.

   The email also shows the Organization owner’s email address (should you need to contact him/her.) Click the Sign In via SSO button or copy-paste the URL to a NEW TAB of the same browser.

   

   Below error message only appears if you’ve been trying to access the Authorization page in a Safari browser.

   Error: The CORS policy for this site does not allow access from the specified Origin....
   

   As a workaround, we suggest you to copy the URL and paste it in a new tab. It will work! For all other browser types, you should be safely landing to the Authorization page.

6. On the Allow “Organization name” to sign you in window, click Authorize if you trust the Organization.

   You should be landing on your Organization’s Bitrise Dashboard. You can check on the Groups tab who has been added to the org as a SAML user.

   

Congrats! You have successfully enabled the SAML connection! Since SAML SSO has not been enforced on your org yet, you can log in via SAML SSO or with your Bitrise credentials.

If you click Account settings and select the Single Sign-On tab from the left menu, you should see SAML SSO is enabled for your Organization. Once all Organization members have enabled their SAML SSO connection, you can enforce SAML SSO on the whole organization with a simple toggle.

Set up Google SSO!

Go to your Organization