This guide provides step-by-step instructions on setting up Bitrise as a SAML application on G Suite.
Before you start ⚓
Before connecting SAML SSO to your Organization, make sure:
- You have a Google administrator account where you can add Bitrise as a SAML app. The G Suite administrator can help setting up SAML SSO on G Suit.
- Your account on Bitrise has an Org with Org Elite or Velocity plan. If it doesn’t have an Org, go ahead and create one.
- As with other Org management actions, only the Org owner can set up SAML SSO to a Bitrise Org.
Navigating to the Single Sign-On page of Bitrise ⚓
If you are an Org owner on Bitrise, you will have to use the Single Sign-On tab to set up a SAML SSO connection between G Suite and your Bitrise Org.
- On your Bitrise Dashboard click your avatar, then click Account settings in the dropdown.
- The Overview page displays all the Orgs you’re a member of. Select the Org where you wish to set up the SAML SSO connection.
- On the left menu bar, click the Single Sign-On tab which will take you to the Enable Single Sign-On page.
- Continue with Getting configuration information from Google.
Getting configuration information from G Suite and Bitrise ⚓
- Sign into your Google Admin Console.
- Select Apps on the Admin Console page.
- On the Apps page, click SAML apps.
- On the Web and mobile apps page, click the Add apps button, and select the Add custom SAML app option from the dropdown.
- On the App details page add
Bitrise
as your app name. Please note it must beBitrise
as no other format is accepted. Click Continue. - On the Getting Identity Provider details page:
- Copy the SSO URL and paste it on the SAML SSO provider Single Sing-On URL (SSO URL) on Bitrise.
- Copy the whole content of the Certificate field and paste it in the SAML SSO provider certificate field of Bitrise.
- While you are in Bitrise, click the Copy Link button to copy the Assertion Consumer Service URL (ACS URL). We will need it on G Suite in a second. Let’s NOT click the Configure SSO button just now!
- Let’s head back to the Getting Identity Provider details page of G Suite. Click Continue.
- On the Service provider details page:
- Paste the Assertion Consumer Service URL (ACS URL) of Bitrise in the ACS URL field on G Suite. (Remember, we got the link at Step 7.)
- Type
Bitrise
in the Entity ID field. Please note it must beBitrise
as no other format is accepted. - Tick the Signed response checkbox under START URL (optional).
- Click CONTINUE.
- Click the Configure SSO button on Bitrise.
- On G Suite’s Attribute mapping page, click Finish - you do not have to configure anything here.
Enabling Bitrise app for a group or an organizational unit ⚓
All there is left to do on G Suite is to enable the newly created Bitrise app for a group or organization of your choice.
- Go to the Web and mobile apps page on G Suite and select Bitrise from the Apps list.
- Click User access to get to the Service status page.
- Select ON for everyone and hit Save.
What’s next? ⚓
Learn how you can log into your Org now that SAML SSO is set up.
You might wan to check out Org member’s SAML SSO statuses once the connection is up.
You might want to enforce SAML SSO login to the Org once all Org members have authorized their SAML SSO connection to the Org.
Disabling SAML SSO is very simple - learn how.