Who Can Do This?
If you would like us to enable Google Single Sign On (SSO) for your organization's account, please reach out to firstname.lastname@example.org.
If you are using Google Suite for your organization's email, then you may want to consider allowing your users to login to Script using their Google account credentials. Giving your users the option to login with Google means one less password for them to remember.
Depending on your needs, you can also optionally whitelist your domain so that any user with an email at your domain can login to your account without needing an invite. This is great for cases where you want everyone in your organization to have basic Script access.
Enabling Google SSO
In order to configure your account's login experience (including Google SSO), you must be an account owner.
From the blue navigation bar on the left side of your screen, select Settings in the bottom left corner.
Select Login and SSO from the white navigation bar on the left side of your screen.
Toggle on the Google SSO button.
Your login page should now reflect the option to log in with Google. From the LINQ login page, users will click the Continue with Google button to utilize their Google SSO.
Any existing user will now be able to login with Google if the email used for their Script account matches that of the Google account they are logging in with.
Customizing the Login Experience
Different organizations have preferences for how they want to use Single Sign On. We provide several options to help tailor the login experience to your needs.
Whitelisting Your Domain
We provide the ability to whitelist the domain that users can login to Script with. This will enforce that people only use Google accounts who belong to the specified domain.
Having a whitelisted domain is a prerequisite to using the automatic account creation feature discussed below.
Setting the New User Behavior
The experience that someone has when they log in with Google for the first time without an existing Script account is governed by the New User behavior settings.
By default, if a user does not have an account, they are denied access.
If you would prefer to require an invite to be sent for new users to gain access to Script, follow these steps:
Toggle on Google SSO button.
Configure the first login behavior under New User to Require an invitation for new users to gain access to Script.
If you want to allow anyone with an email address on your domain to login to Script without needing to pre-invite them, follow these steps:
Toggle on Google SSO button.
Whitelist your Domain as described above.
Configure the first login behavior under New User to A user is created automatically for all new users who log in using SSO.
You will then see the Default Access Level dropdown menu appear. Choose which level of Script access you would like new users to have. By default, Inbox Only access is granted. This is the least permissive option that only allows users to complete submissions but not see workflows or forms. If you would like all members of your organization to have access to workflows and forms, you can change the Default Access Level setting to Dashboard. We recommend keeping this set to Inbox Only for automatic account creation. Additional permissions can be granted once their Script account is created.
Now that this option is enabled, any user that tries to login with an email from your domain will be presented with your organization as a login option. If you manage multiple organizations, all organizations that you whitelist will be presented to users to pick from as they login.