How to Configure Google Workspace SSO for Time Doctor

This guide walks you through integrating Time Doctor with your Google Workspace for easy single sign-on (SSO) access using SAML2.0. You'll create applications in Google Workspace to enable seamless login to Time Doctor through the "Sign in with SSO".

Google Workspace SSO options

Google Workspace offers SSO via SAML and OIDC protocols.

See Google SSO official documentation.

We'll focus on SAML-based integration for Time Doctor, ensuring a smooth login experience.

Prerequisites

Before you start, please make sure you have administrative access to both your Time Doctor company account and Google Workspace.

Time Doctor Company with owner or admin access

Time Doctor Company Settings
Google Workspace Admin panel

Main Steps:

Step 1: Create a new app for Time Doctor's webapp:
- Use SAML2.0
- Use the Google Workspace admin console via
  - https://admin.google.com/ac/apps/unified
Step 2: Create a new app for the Time Doctor web-desktop:
- Use SAML2.0
- Use the Google Workspace admin console via
  - https://admin.google.com/ac/apps/unified
Step 3: Configure the Google SSO under the Time Doctor Company setting
- Access the Time Doctor Company settings page
- Retrieve values from Google Workspace Admin Console → Security → Authentication
  - https://admin.google.com/ac/security/ssocert
- Add these retrieved values to your Time Doctor company settings.

Step 1: Create a new app for the Time Doctor webapp with SAML2.0 in Google Workspace Console

In your Google Workspace admin console, create a new web app with SAML2.0 integration. You can follow the steps provided by Google to set up the app.

step-1

Step 1.1: App details:

Name: Time Doctor webapp

You can add the logo of Time Doctor.

step-1.1 Press Continue.

Step 1.2: Google Identity Provider details

Do nothing and press Continue.

Step 1.3: Service Provider details

ACS URL

https://api2.timedoctor.com/api/1.0/oauth2/google/sso/callback/web

Entity ID

https://api2.timedoctor.com/api/1.0/oauth2/google/sso/callback/web

Name ID Format

EMAIL

step-1.3 Press Continue.

Step 1.4: Attribute Mapping

Google Directory attributes → App attributes

Primary Email → Email

step-1.4 Press Finish.

Step 1.5: Turn it on for everyone

step-1.5A

step-1.5B

step-1.5C-1

Step 2: Create a new app for the Time Doctor webdesktop with SAML2.0 in Google Workspace Console

In your Google Workspace admin console, create a new web app with SAML2.0 integration.
You can follow the steps provided by Google to set up the app.

step-2