This guide provides step-by-step instructions on setting up Bitrise as a SAML application on G Suite.
Before you start ⚓
Before connecting SAML SSO to your Workspace, make sure:
- You have a Google administrator account where you can add Bitrise as a SAML app. The G Suite administrator can help setting up SAML SSO on G Suit.
- Your account on Bitrise has a Workspace with the Velocity plan. If it doesn’t have a Workspace, go ahead and create one.
- As with other Workspace management actions, only the Workspace owner can set up SAML SSO to a Bitrise Workspace.
Navigating to the Single Sign-On page of Bitrise ⚓
If you are a Workspace owner on Bitrise, you will have to use the Single Sign-On tab to set up a SAML SSO connection between your SAML SSO provider and your Bitrise Workspace.
- On your Bitrise Dashboard click your avatar, then click Profile settings in the dropdown.
- The Overview page displays all the Workspaces you’re a member of. Select the Workspace where you wish to set up the SAML SSO connection.
- On the left menu bar, click the Single Sign-On which will take you to the Enable Single Sign-On page.
- Continue with Getting configuration information from Google.
Getting configuration information from G Suite and Bitrise ⚓
- Sign into your Google Admin Console.
- Select Apps on the Admin Console page.
- On the Apps page, click SAML apps.
- On the Web and mobile apps page, click the Add apps button, and select the Add custom SAML app option from the dropdown.
- On the App details page add
Bitriseas your app name. Please note it must be
Bitriseas no other format is accepted. Click Continue.
- On the Getting Identity Provider details page:
- Copy the SSO URL and paste it on the SAML SSO provider Single Sing-On URL (SSO URL) on Bitrise.
- Copy the whole content of the Certificate field and paste it in the SAML SSO provider certificate field of Bitrise. You can upload the Certificate from your local computer too.
- While you are in Bitrise, click the Copy Link button to copy the Assertion Consumer Service URL (ACS URL). We will need it on G Suite in a second. Let’s NOT click the Configure SSO button just now!
- Let’s head back to the Getting Identity Provider details page of G Suite. Click Continue.
- On the Service provider details page:
- Paste the Assertion Consumer Service URL (ACS URL) of Bitrise in the ACS URL field on G Suite. (Remember, we got the link at Step 7.)
Bitrisein the Entity ID field. Please note it must be
Bitriseas no other format is accepted.
- Tick the Signed response checkbox under START URL (optional).
- Click CONTINUE.
- Click the Configure SSO button on Bitrise.
- On G Suite’s Attribute mapping page, click Finish - you do not have to configure anything here.
Enabling Bitrise app for a group or an organizational unit ⚓
All there is left to do on G Suite is to enable the newly created Bitrise app for a group or organization of your choice.
- Go to the Web and mobile apps page on G Suite and select Bitrise from the Apps list.
- Click User access to get to the Service status page.
- Select ON for everyone and hit Save.
What’s next? ⚓
Learn how you can log into your Workspacenow that SAML SSO is set up.
You might wan to check out Workspace member’s SAML SSO statuses once the connection is up.
You might want to enforce SAML SSO login to the Org once all Workspace members have authorized their SAML SSO connection to the Workspace.
Disabling SAML SSO is very simple - learn how.
Workspace members can log into or sign up to Bitrise using their own SAML SSO provider's system. With SAML SSO, Workspaces will be able to apply the security guidelines of...