Configuring Iru Endpoint Connection
Follow these steps to configure the connection in Iru:Navigate to the Account Menu Button
In Iru Endpoint, in the sidebar, click the Account Menu Button.
Access Authentication Settings
Click the Access option in the menu. Select Admin and Authentication
Select the Admin and authentication tab (selected by default) and scroll down to Authentication methods.
Add Authentication Method
Click + Authentication method.
Enter Display Name
Enter a display name for the SSO Connection.
Select Google Workspace
Select Google Workspace.
Create Connection
Click Create.
Copy Redirect URL
Copy the Redirect URL into a text document for later use. You’ll need this for the Google Workspace configuration. Keep Tab Open
Keep the Iru Web App configuration modal open, then switch to the Google Workspace Configuration tab to continue.
After completing the Google Workspace configuration, return here to finish setting up the SSO connection in Iru Endpoint. You’ll need the Client ID, and Client secret you copied from Google Workspace.
Enter Google Workspace Domain
Enter your Google Workspace domain from Google Workspace.
Paste Client ID
Paste the Client ID you copied from Google Workspace into the Client ID field.
Paste Client Secret
Paste the Client secret you copied from Google Workspace into the Client secret field. Save Configuration
Click Save.
Confirm Setup
Your connection has now been successfully configured and may be enabled and tested.
Allow for Tenant Authentication
Once you have configured the SAML connection in Iru Endpoint and your identity provider, you can allow its use for tenant authentication. For step-by-step instructions, please refer to the Allowing Tenant Authentication and Managing Connections section in our Single Sign-on support article.Limit Authentication to Domain
When configuring the SAML connection, you can optionally limit authentication to one or more domains. This can be useful when the SSO connection could authenticate to multiple domains. You can limit the authentication to your Iru tenant to a subset of the available domains.Enforcing Single Sign-On
Once you have configured at least one Single Sign-on connection, you can disable Passkey, Google Social, and Microsoft Social connections. Disabling these connections will disable the ability for Iru Endpoint administrators in your tenant to authenticate via those methods. Please refer to our Single Sign-on support article for step-by-step instructions.Setting Up Google Workspace Application
Before starting the Google Workspace configuration, complete the initial setup in the Iru Web App Configuration tab to get the Redirect URL. You’ll need this value to configure the Google Workspace application.
Access Google Developer Console
Log in to the Google Developer API Console. Then click Create project. Configure Project Details
Enter a Project name.
Select Organization
Choose the Organization from the dropdown menu.
Create Project
Click Create.
Access Credentials
In the sidebar, click Credentials.
Create Credentials
On the right side of the window, near the top, click + Create credentials.
Select OAuth Client ID
From the menu that appears, choose OAuth Client ID. Configure Application Type
For “Application Type,” click the menu and select “Web application”.
Name OAuth Client
In the Name field, enter a Name for your OAuth client.
Configure Authorized JavaScript Origins
For Authorized JavaScript Origins, use just the domain section from the Redirect URL you copied from the Iru Web App Configuration (e.g., https://vpriix.id.iru.com). This domain is unique to each Iru tenant.
Configure Authorized Redirect URIs
For Authorized redirect URIs, enter the complete Redirect URL you copied from the Iru Web App Configuration (e.g., https://vpriix.id.iru.com/federated-auth/oidc/callback). Create OAuth Client
Click Create.
Copy Client ID
Copy the text from the Client ID field and save it for later use.
Copy Client Secret
Copy the text from the Client Secret field and save it for later use. After completing the Google Workspace Configuration, return to the Iru Web App Configuration tab to finish setting up the SSO connection using the Client ID, and Client secret you copied from Google Workspace.
