Set up SAML SSO authentication (generic)

We support you in whatever SAML SSO provider you want to use for your people to log in to Gong.

This article describes the information you need to set up SAML SSO in Gong for non-specific providers. We have specific instructions for Okta, OneLogin, and Rippling. For any other providers, read on. This article includes information you may need to give your provider. Have questions? Check out the Authentication FAQs.

Prerequisites

We ask for the following information:

Identity Provider Metadata URL or Identity Provider Metadata XML file

The URL must be a public URL, meaning that it's publicly accessible, and it should generate a valid SAML Metadata response.

The XML response or the Metadata XML file must include two SSO bindings with a valid URL:
- HTTP-POST
- HTTP-REDIRECT
An example of the SAML response Gong receives:
The URL you want to redirect people to after they log out of Gong
In your provider, set the SAML name identifier property to emailAddress
In your provider, make sure that Signed Authentication Request is turned off

Microsoft Azure SAML SSO setup

To set up authentication via Microsoft Azure:

Log into Microsoft Azure with admin credentials and select Enterprise applications.
Click +New application > Create your own application.
Give the application a name such as Gong SSO, keep the default settings and click Create.
In the application, select Set up single sign on.
Select SAML.
Edit the Basic SAML Configurations and enter the following values:
1. Identifier (Entity ID): https://app.gong.io
2. Reply URL (Assertion Consumer Service URL): https://app.gong.io/welcome/okta/saml/login
Click Save.
Edit the Attributes & Claims section as follows:
- Name identifier format: Email address
- Source: set to Attribute
- Source attribute: user.mail
- Delete any Additonal claims.
In the Users and Groups section, add the users or groups you want to have SSO login to Gong.
In the Single sign-on section copy the App Federation Metadata URL.

Once you have set up Microsoft Azure for SSO authentication in Gong:

In Gong, go to Company settings > Company > Authentication.
In the Identity provider metadata URL, enter the App Federation Metadata URL you copied from Microsoft Azure.
In After logout, redirect to, enter https://myapps.microsoft.com or a URL that displays the applications the user has access to.
Click Update. Logout and login via Azure to test SSO authentication.

Menu

In this article

Microsoft Azure SAML SSO setup