Set up SAML SSO authentication (generic)

Who can use this: Tech admin

Available on: Any Gong plan

You can use any SAML SSO provider to manage how team members log in to Gong.

This article describes the information you need to set up SAML SSO in Gong for non-specific providers. We have specific instructions for Okta, OneLogin, and Rippling.

Prerequisites

We ask for the following information:

• Identity Provider Metadata URL or Identity Provider Metadata XML file

  The URL must be a public URL, meaning that it's publicly accessible, and it should generate a valid SAML Metadata response.

  The XML response or the Metadata XML file must include two SSO bindings with a valid URL:

  • HTTP-POST

  • HTTP-REDIRECT

  An example of the SAML response Gong receives:

   

• The URL you want to redirect people to after they log out of Gong

• In your provider, set the SAML name identifier property to emailAddress

• In your provider, make sure that Signed Authentication Request is turned off

Your provider may need

Your provider may ask you for some or all of the following:

• Gong's entity ID: https://app.gong.io (use this value as written here and not the customer application domain)

• Gong's ACS URL: https://app.gong.io/welcome/okta/saml/login

• X509 certificate: Gong does not provide this certificate. Your provider should be able to provide one, if needed.

Step 1: Generate the Gong entity ID

The suffix for your Gong URL is required for configuring Microsoft Entra ID.

To generate the suffix for the URL:

1. From the left sidebar, click Admin center.

2. In the Settings tab, click Authentication in the Company card.

3. In Additional authentication providers, select Generic SAML SSO.

4. Click the copy icon to copy the Gong entity ID.
   

Step 2: Setup Microsoft Entra ID SAML SSO

To set up authentication via Microsoft Entra ID:

1. Log into Microsoft Entra ID with admin credentials and select Enterprise applications.

2. Click +New application > Create your own application.

3. Give the application a name such as Gong SSO, keep the default settings and click Create.

4. In the application, select Set up single sign on.

5. Select SAML.

6. Edit the Basic SAML Configurations and enter the following values:

   1. Identifier (Entity ID): Paste the entity ID you generated above https://app.gong.io/<unique-entity-id>

   2. Reply URL (Assertion Consumer Service URL): https://app.gong.io/welcome/okta/saml/login

7. Click Save.

8. Edit the Attributes & Claims section as follows:

   1. Name identifier format: Email address

   2. Source: set to Attribute

   3. Source attribute: user.mail

   4. Delete any Additional claims

   Note:

   If you plan to provision team members via Microsoft Entra ID make sure you configure the permissions listed in Microsoft Entra ID provisioning setup.

9. In the Users and Groups section, add the users or groups you want to have SSO login to Gong.

10. In the Single sign-on section, copy the App Federation Metadata URL.

Step 3: Complete the Gong setup

Set the identity provider metadata URL in Gong

To set the identity provider URL:

1. In Gong, from the left sidebar, click Admin center.

2. In the Settings tab, click Authentication in the Company card.

3. In the Identity provider metadata URL, enter the App Federation Metadata URL you copied from Microsoft Entra ID.

4. In After logout, redirect to, enter https://myapps.microsoft.com or a URL that displayes the applications the user has access to.

5. Click Update.

6. Logout and login via Entra ID to test the SSO authentication.