Answer
Google Workspace SSO/SAML and Manual User Sync
Prerequisite: Verify Domain in the Foxit Admin Console
- Open Foxit Admin Console
- Navigate to Settings > Directory Setting > Verify Domain / Domain Settings
- You can verify domains in the following two methods:
- DNS Method – Copy a TXT record to your domain name system. (Recommended)
- Type -> TXT
- Host/Name -> @ or leave blank
- TXT Value -> (Copy>Paste from Foxit Admin Console under
- TTL -> 1 Hour
- HTTPS Method – Upload an HTML file to the root folder of your domain’s website.
- After uploading the HTML file or adding the TXT record, click Verify Domain.
- In the pop-up dialog box, select TXT Record or HTTPS correspondingly, enter the domain you want to verify in the Domain field, and click Verify domain.
- Then the domain will be added to the Verified Domains List, and you can view the verification status. The status of a domain may show Unverified. Verifying domains using DNS may take up to 72 hours for your domain to verify and DNS changes to take effect. Then you can click Verify in the Actions column to verify again.
To remove a domain from the list, click Remove in the Actions column. When a verified domain is removed, the users with that domain are no longer managed and won't appear on your managed account page
Google Workspace SSO/SAML Configuration
This article explains how to configure Google Workplace (formerly known as G-Suite) Single-Sign-On (SSO) with the Foxit Admin Console so that users activate/login to our solutions using your organizations SSO.
These instructions may vary depending on your environment. If you have specific settings, you may need to check those with your IdP admins as Foxit only supports SSO as it is written in this article.
1. Create App in Google Workspace
Login to your Workspace Admin , and click on Apps
1.1 Click on Web and mobile apps
1.2. Select Add App → Add custom SAML app
1.3. Enter a name for your app. We recommend "Foxit SSO" then click on Continue
2. Configure SAML in Foxit Admin Console
Now, Google Admin will display the SSO URL , Entity ID and Certificate information we will need to enter in the Foxit Admin Console
2.1. Open the Foxit Admin Console and go to Settings > Directory Setting > SAML Configuration
Here enter the details obtained from the previos step as follows:
Under " Identity provider Entity ID " enter the " Entity ID " from Google Admin
Under " Identity Provider SSO URL " enter the "SSO URL" from Google Admin
Under " Public x509 certificate " enter the " Certificate " from Google Admin
Do NOT click on "Save configuration" yet.
3. Configure SAML App in Google Workspace
Click on Continue in Google Admin and enter the details from the Foxit Admin Console as follows:
Under " ACS URL " enter the " SP Assertion Consumer Service URL " from the Foxit Admin Console
Under " Entity ID " enter the " SP Entity ID " from the Foxit Admin Console
Nothing to enter under "Start URL" in the Google Admin
Leave everything else as-is and click on " Continue "
3.1. Add Attributes
You are in the " Attribute Mapping " section of the Add Custom SAML app in Google Admin
Click Add Mapping and select " Primary email " and enter the word " email " under App attributes. (Just the word without the quotes)
Click Add Mapping again and select " First name " and enter the word " firstname " under App attributes. (Just the word without the quotes)
Click Add Mapping again and select " Last name " and enter the word " lastname " under App attributes. (Just the word without the quotes)
4. Test your SAML App
Select " Finish" in the Google Admin
Click on " Save Configuration " in the Foxit Admin Console
Select " TEST SAML LOGIN " in Google Admin. This will have you Enable the App for your Organization.
A successful configuration will display a " Login Successful " message on a New Window.
Google Workspace User Sync Configuration
This article explains how to synchronize users between Google Workplace (formerly known as G-Suite) and Foxit's Admin Console.
These instructions may vary depending on your environment. If you have specific settings, you may need to check those with your IdP admins as Foxit only supports this function as written in this article.
Prerequisites: You must have SSO/SAML setup with Google Workspace.
- Google Cloud Platform Configuration
- Workspace Configuration
- Admin SDK API Configuration
- Foxit Admin Console Configuration
1. Google Cloud Platform Configuration
1.1 Login to Google Cloud Platform as Admin
Log in to Google Cloud Platform as an Admin
1.2 Click on IAM & Admin
1.3 Click on CREATE PROJECT
1.4 Enter a Project name
1.5 Select the newly created Project
1.6 Click on CREATE SERVICE ACCOUNT
1.7 Name your new Service
Click Done and leave both "Grant this service account access to project" and "Grant users access to this service account" empty.
The following page is displayed after you've clicked Done.
1.8 Manage keys
Click on Actions → Manage keys
1.9 Create a new key
1.10 Create JSON key
1.11 Save JSON key
We will need it later.
1.12 collect Unique ID and Service Account Email
Go back to the DETAILS tab, collect Unique ID and Email (service account email）
We will need these later
2. Workspace Configuration
2.1 MANAGE DOMAIN WIDE DELEGATION
Go back to the Google Workspace , click MANAGE DOMAIN WIDE DELEGATION
2.2 Add new DOMAIN WIDE DELEGATION
2.3 Add a new client ID
For Client ID → enter the Unique ID collected in step 1.14
Enter https://www.googleapis.com/auth/admin.directory.user in Oauth scopes
Click AUTHORIZE
3. Admin SDK API Configuration
Go to Admin SDK API , and ENABLE project Admin SDK API for the project created on step 1.3
4. Foxit Admin Console Configuration
Choose Google Workspace Connector:
- Upload key file = JSON file collected at 1.12
- Email (Service Account Email) = Email collected at 1.14
- Admin Email = the Google Identity Admin email