SSO in Pachca with Google Workspace SAML

This guide explains how to connect Pachca to Google Workspace so employees in your directory can log in with SSO. We support any IdP that works with the SAML 2.0 protocol

SSO with Google Workspace is available only to organizations outside Russia.

Set up the SAML app

1. Create a new SAML app.

‍

2. Download the metadata file and send it to us.

‍

3. Fill in the form as shown below. In the ACS URL field, enter your personal URL. In the Entity ID field, enter the ID we give you. We'll send you all the details you need.

‍

‍

Pass employee attributes to Pachca

1. Go to SAML attribute mapping

2. Fill in the form as shown below.

‍

We can agree on handling other fields in Pachca to fit your use case. To pass them, add the mapping to this table and tell us the Name you entered.

Pachca profile fields and their attribute names:

• Phone: phone_number
• Job title: title
• Department: department
• Group tags: group_tags

You can also pass any other text fields from your directory to Pachca, such as an employee's manager or birthday. To do this:

• Create the field in Members in Pachca (Members → settings → add field → set a name and any type except "file")
• Enter the attribute name in the mapping, as described above for the standard profile fields

3. Once the mapping is set up, let support know so they can connect it

4. Finish creating the new app.

5. Turn on the app for all users.

‍

6. That's all you need to do on your side. Once you've sent us the values above, wait for us to finish setting up Pachca. When everything is ready, you and your employees can log in with SSO.

If you get the "app_not_configured_for_user" error when logging in, you're signing in with the super admin account. Try a different account.