Google Workspace SSO

userXello Admin Xello productAccounts Time3 minutes

With Xello SSO, students can log into their Google Workspace (formerly G Suite) account and then access Xello without a separate login.

FYIFYI: To learn more about how SSO works in Xello, see the articles How Student SSO Works and How Educator SSO Works.

To set up SSO through G Suite:

  1. Sign in to https://admin.google.com new tab with your Google Workspace administrator account.
  2. Click the Apps icon, then click Web and mobile apps.
  3. Apps icon with arrow pointing to web and mobile apps
  4. Click the Add App dropdown, and select Add custom SAML app.
  5. Add App dropdown with "Add custom SAML app" highlighted
  6. Step 1 of 4: You're prompted to enter the name of the app. Enter "Xello" without the quotes and then click Continue.
  7. App name field filled with "Xello"
  8. Step 2 of 4: under Option 1, click Download Metadata to download an .xml file containing all the information Xello needs to allow Google Workspace access for your district.
    • Save the downloaded file in an easily accessible location. You will need to send this to your Onboarding Manager. Once you have saved the IdP metadata, click Continue to proceed to step 3.
  9. Option 1: Download IdP metadata. Download Metadata button highlighted
  10. Step 3 of 4: enter the below information and leave the rest as is. When finished, click Continue.
    • ACS URL: https://auth.xello.world/saml
    • Entity ID: urn:XelloSamlServiceProvider
  11. service provider details with ACS URL and entity ID fields filled
  12. Step 4 of 4: click Add Mapping. In the first dropdown, select Primary email. In the second field, type: sso-token (field is case-sensitive, so be sure to enter it in lowercase). Click Finish.
  13. attributes window with basic information filled out with "Primary email" and app attributes filled out with sso-token
  14. From the User access area, click View details and select On for everyone. Click save.
  15. Service status box with "On for everyone" highlighted
  16. Email the downloaded .xml file to your Onboarding Manager.
    • It may take up to 24 hours for Google to implement your Google Workspace SSO.
noteNote: At this time, Google Workspace doesn't allow you to set an icon for applications. Instead it will create an icon with the first two characters of the application name: Xe. Circle icon with the letters Xe