Server Online
Server Online
Breadcrumbs

Integrate Google with FileCloud

Before completing the following procedures, configure Apache Web Server. See SSO Configuration Step 1 on the page SAML Single Sign-On Support for configuration instructions.

As an administrator you can integrate Google and FileCloud so that your Google users can access their FileCloud account without having to enter their credentials a second time.

When FileCloud is integrated with Google, Google is configured as an Identity Provider (IdP) and FileCloud acts as the Service Provider (SP).  

Sync a user’s FileCloud and Google groups
By default, this integration does not synchronize a user’s SSO groups and FileCloud groups each time a user logs in with SSO. This can result in unauthorized access to content as well as missing access where it's needed. To prevent this:

  1. Complete step 9 in the procedure below.

  2. Complete the step in Syncing Group Changes on Every Login, below.

To configure FileCloud with Google:

  1. Log in to the Google Workspace Admin Center at admin.google.com.

  2. In the left navigation pane, go to Apps > Web and mobile apps.

    WebAndMobileApps.png

  3. Click Add app and choose Add custom SAML app.

    AddSAMLApp.png

  4. Enter an App name, and click CONTINUE.

    NameApp.png

  5. Click CONTINUE.

    ClickContinue.png

  6. Fill in the fields as follows, replacing http://your-domain.com with your FileCloud domain. Click CONTINUE.
    ACS URL: https://your-domain/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp
    Entity ID: https://your-domain/simplesaml/module.php/saml/sp/metadata.php/default-sp
    Start URL: https://your-domain/
    Name ID Format: TRANSIENT
    NameID: Basic Information > Primary Email

    2025-06-20_10h46_49.png

  7. Click ADD MAPPING.

    AddMapping.png

  8. Choose the Google Directory attributes below, and add the specific values shown to App attributes.

  9. AddAttrib.png

    Optional: If you have chosen to sync FileCloud and Google groups on every login, under Group membership, set the attribute memberof to the Google groups each user may belong to.

    GoogleGroups.png

    Note: To sync groups on every login, you must also complete the step in Syncing group changes on every login, below.

  10. Then click FINISH.

  11. In the screen that appears, click DOWNLOAD METADATA.

    FinalScreen.png

  12. In the Download metadata popup, click DOWNLOAD METADATA.
    The file GoogleIDPMetadata.xml is automatically downloaded.

  13. Click the copy icon next to Entity ID, and save it. You will need it to complete your configuration in FileCloud.

    DownloadMetadata.png



  14. Click CLOSE.

  15. Click the down arrow in the User access box.

    ClickDownArrow.png

  16. Select ON for everyone.
    If you want to only enable this for certain groups, click the Groups down arrow and add the groups.

    OnForEveryone.png

  17. Click SAVE.

Configure Google SSO in the FileCloud admin portal

Now, add the values from your integration in the Google admin portal into the corresponding fields in FileCloud.

  1. In the FileCloud admin portal's left navigation bar, scroll down and click Settings. Then, on the Settings navigation page, click SSO  SSOIcon.png .
    The SSO page opens.

  2. In Default SSO Type, select SAML.

    image-20251105-183745.png

  3. Fill in the settings under SAML Settings. The table below the image shows what to enter in each required IdP value. 

    image-20251105-183755.png



    Setting

    Value

    IdP endpoint URL or entity ID

    Enter the value of Entity ID from your Google/FileCloud app in the Google admin portal, See the image below. 

    IdP username parameter

    mail

    IdP email parameter

    mail

    IdP given name (first name) parameter

    givenName

    IdP surname (last name) parameter

    sn

    IdP log out URL 

    See SAML Single Sign-On Support

    Limit log in to IdP group

    See SAML Single Sign-On Support

    IdP Metadata

    Enter the content of the metadata file you downloaded from your Google/FileCloud app in the Google admin portal. It should have been downloaded as GoogleIdPMetadata.xml.

     

    image-20251105-183806.png

  4. For help filling the remaining settings on the page, see Step 4 on page SAML Single Sign-On Support.

  5. To display the SSO option on the user login page, see Step 6 on page SAML Single Sign-On Support

Syncing group changes on every login

If changes to your users' group membership may affect the content they have access to, you may sync a user’s group changes each time they log into FileCloud with their SSO login.

To configure SSO login to sync groups on each login:

  1. In the FileCloud admin portal, go to Settings > SSO.

    1. Enable the setting Sync groups on every login.

      SyncGroups.png

    2. In IDP log out URL (optional) enter https://www.google.com/accounts/Logout?continue=https://appengine.google.com/_ah/logout?continue=[https://your_filecloud_instance.com]
      replacing [https://your_filecloud_instance.com] with your actual FileCloud server URL.

      2026-10-02_14h39_26.png


      Note: This is required, not optional for syncing groups on each login.
      warning It will logout and close all the Google sessions in the browser, including Gmail.

  1. Complete Step 12 under To configure FileCloud with Google, above.