This page describe how to set up SSO(Single Sign On) and Provisioning with Google Workspace in Acall.

Note
Kindly note that the contents, screen captures and the order of steps on this manual may differ if Google Workspace changes the specifications. 
You may cross-check the instructions from Google.

Reference: Set up your own custom SAML app

 

Set up SSO

This process is to complete SSO setting; below is the overview of the workflow.

Create an app for Acall

When using SSO, one app for Acall (hereafter referred to as Acall app) must be created.

 

Open Google Workspace Admin console.

Click [Apps] > [Web and mobile apps] and click [Add app] > [Add custom SAML app].

 

Enter app name (ex: Acall) and click [CONTINUE].

 

 

Click [DOWNLOAD METADATA] and download metadata file.

Click [CONTINUE].

 

Set up as follows and click [CONTINUE].

Items	Value
ACS URL	https://api.acall.jp/auth/saml/callback *Do do not enter “/” at the end of the URL *This ACS URL will be replaced in a later step
Entity ID	https://api.acall.jp *Do do not enter “/” at the end of the URL
Start URL	https://portal.workstyleos.com *Do do not enter “/” at the end of the URL
Name ID format	EMAIL

 

Click [FINISH].

 

Assign app to users

Click the app you have created.

💡Note
It may take several minutes for the app to appear on the list.

 

Click [User access].

 

Select [ON for everyone] and click [SAVE].

 

Contact Acall for SSO setting

Please contact Acall via contact form with your desired setup time/date (weekdays (excluding our holidays) 10:00 ~ 16:00 JST) and the following information.

1. Certificate file
2. Login URL

 

How to download a certification file

Open [Service provider details] for Acall app.

 

 Click [Manage certifications].

 

Click the download icon to download the certificate file.

⚠️ If you have multiple certificates, download the one currently in use for Acall app.
The certificate shown on the "Service provider details" section is the one currently in use.

 

How to check the login URL

Right click [Acall] > retrieve by clicking [Copy link address].

 

Set up ACS URL

After Acall completes the SSO setup, you will receive an "ACS URL". Please follow the steps below to set it up in your Acall app.

 

Open Acall app and click [Service provider details].

 

Replace ACS URL and click [SAVE].

 

Test SSO

Test SSO login to Acall Portal or Acall Mobile. If you are not able to log in or face any problems,  please reach out to Acall with the following information.

• Screenshot of the error
• Date/Time of your test
• Steps you took
• Email address of the account

💡Note
If you see "not_a_saml_app」「app_not_configured_for_user" error,  it is possible that your Google Workspace settings have not been reflected.
Please wait a few minutes and try again.

 

(Optional) Set an icon for the app

Setting an icon image for the app makes it easier to recognize the Acall app on the app list.

 

If you want to set an icon image, please follow the steps below.

Download service logo image file from Acall press kit page.

 

Click [EDIT DETAILS] for Acall app.

 

Click app icon and [CHANGE PHOTO].

 

Select the downloaded file and click [SAVE].

 

 

(After Go-live) Renew SSO Certificate

Certificate Expiration

Certificate used for SSO has an expiration date.

 

If certificate expires, you will be unable to log in to Acall.

You need to create a new certificate and replace it with the old one before the expiration date.

⚠️Note
Expiration date of the certificate must be managed by the customer. 
Acall does not manage or notify the date.

 

Renew Certificate

Preparation:

1. Create new certificate for Acall app in Google Workspace

2. Contact Acall via contact form with the following information

   ・Desired renewal time and date (weekdays (excluding Japan's public holidays) 10:00 ~ 16:00 JST)

   ・New certificate

3. Acall informs you of the determined renewal date.

Workflow On The Renewal Day:

4. Activate the new certificate for Acall app in Google Workspace.

5. Acall sets up SSO

6. Test SSO login on Acall Portal or Acall Mobile

⚠️Note
You will not be able to SSO login between Step 4 and Step 5. 
Although it will take only a few minutes to complete Step 5 on Acall side, please consider the date and time to proceed renewal.

 

Below are the instructions for setting up the certificate on Google Workspace side.

 

Create New Certificate (Step 1)

Click [Service provider details].

 

Click [Manage certificates].

 

Click [ADD CERTIFICATE].

 

A new certificate is added.

 

Click the download icon for the new certificate to download the certificate file.

⚠️
Please check the expiration date, etc. so that you do not accidentally download an old certificate file.

 

New Certificate Activation (Step 4)

Select the new certificate and click [SAVE].