Integrating with Google SSO

⏱️ 3 minute read

Google SSO improves the user experience, streamlines access, and strengthens security by allowing your team to use their existing Google Workspace accounts to sign in to Forecast and there is no need to remember or manage another password. 

This article covers:

• Activating Google SSO in Forecast
• Enforcing Google SSO
• Logging into Forecast with Google SSO
• Managing Authentication Types

Activating Google SSO in Forecast

Google SSO is enabled by a Forecast Admin. Once activated, users can log in to Forecast using their Google credentials, simplifying their login experience.

To activate Google SSO

1. Click Admin in the navigation ribbon.
2. Select Integrations from the dropdown.
3. Scroll down to Security & single sign-on (SSO).
4. Click on Google.
5. Click Activate. 
   
6. The integration is now active. 

Enforcing Google SSO

Admins can require users to log into Forecast via Google SSO. It is recommended that at least one (1) Forecast Admin be exempt from SSO.

To enforce Google SSO

1. Click Admin in the navigation ribbon.
2. Select Integrations from the dropdown.
3. Scroll down to Security & single sign-on (SSO).
4. Under Require SSO, move the toggle to Enable.
5. Users are now required to log in using SSO. 
   

To disable SSO enforcement

1. From Admin > Integrations > Security & sign-on (SSO), move the toggle to Disable.
2. SSO is no longer enforced and users may log in with SSO or standard authentication, i.e. email/password combination.
   

To add an exemption

1. Once Require SSO is enabled, the Exemptions dropdown appears.
2. In Add Person, select at least 1 Forecast Admin from the dropdown.
3. Exempt users can log in with SSO or with standard authentication, i.e. email/password combination.
   

To remove exemptions

1. From Admin > Integrations > Security & sign-on (SSO), click the X next to the user to remove the exemption.
2. The user is now required to use SSO when logging into Forecast. 
   

Logging into Forecast with Google SSO

Once Google SSO is active, users can use the Google icon on the Forecast login page to access the platform. 

To log in using Google SSO

1. From https://app.forecast.it/login, click the Google logo at the bottom of the page. 
   
2. In Choose an account, select your Google Workspace user. 

Managing Authentication Types

When enabling an SSO integration in Forecast, the default setting Require SSO is not enabled.

If SSO is enabled, but not required:

• Users may login using SSO or standard authentication (username/password combination). 

If Require SSO is enabled:

• SSO is required for login and standard authentication will not work. 

It is possible to set exceptions to the SSO requirement, if desired. See Enforcing Google SSO above for more information.