Google Workspace Integration
TigerTrust integrates with Google Workspace for enterprise identity and access management.
SAML App Configuration
Add TigerTrust as a SAML app:
1. Navigate to Admin Console > Apps > Web and mobile apps
2. Click "Add app" > "Add custom SAML app"
3. Configure:
- App name: TigerTrust
- ACS URL: https://api.tigertrust.io/auth/saml/callback
- Entity ID: https://tigertrust.io/saml/metadata
- Name ID: Email address
Attribute Mapping
Map Google attributes to TigerTrust:
| Google Attribute | TigerTrust Field |
|---|---|
| Primary email | |
| First name | firstName |
| Last name | lastName |
| Department | department |
User Provisioning
Enable automatic provisioning via Directory API:
google_workspace: domain: example.com service_account: [email protected] admin_email: [email protected] sync: users: true groups: true organizational_units: true filters: include_ous: - /Engineering - /Operations - /Security
Group-Based Access
Map Google Groups to TigerTrust roles:
group_mappings: - google_group: cert-[email protected] tigertrust_role: administrator - google_group: cert-[email protected] tigertrust_role: operator - google_group: security-[email protected] tigertrust_role: security_auditor
Context-Aware Access
Configure access policies based on context:
Access Level: Secure Certificate Access
---
Conditions:
- Device policy: Corporate managed
- IP ranges: 10.0.0.0/8, 192.168.0.0/16
- Location: United States
Applications:
- TigerTrust
Admin Console Integration
Manage TigerTrust from Admin Console:
- User assignment and removal
- Group membership management
- Access policy configuration
- Audit log viewing
Cloud Identity
For Cloud Identity customers:
- Same SSO capabilities
- Directory sync support
- Group-based access control
- Context-aware access (premium)
Simplify identity management with Google Workspace and TigerTrust.