Target
Customers who have implemented SAML integration with Google Workspace in HENNGE Access Control are eligible.
Contents
We will guide you through the procedure for updating the SAML signing certificate in HENNGE Access Control and Google Workspace.
Notes
1. The content of this article is based on product specifications as of April 2024 and may be subject to change without notice thereafter.
2. HENNGE Access Control administrator privileges are required for actual screen verification and configuration changes.
3. Please refer to the following article for instructions on how to access the Administration.
Accessing the HENNGE Access Control Administration
4. Prior to performing this task, it is necessary to switch to Modern view.
Switching to Modern view
5. Both HENNGE Access Control and Google Workspace need to be updated for this procedure.
6. Once the update process has been completed, it cannot be undone.
7. Implementing this procedure up to Detailed Step 1 in advance will not affect the SAML verification between HENNGE Access Control and the connected service.
8. During the implementation of Detailed Steps 2-5 until the completion of 3-2, there will be a temporary period where Single Sign-On from HENNGE Access Control to the connected service will not be possible. Please consider the timing of the procedure in advance.
Detailed Procedure
1. Download a new SAML signing certificate for replacement from HENNGE Access Control
1-1. Access the "Connected Services" menu on the HENNGE Access Control administrator screen and click on the integration settings with Google Workspace.
You can set the configuration name arbitrarily, but please confirm if it is registered under names such as Gmail or Google Workspace.
1-2. On the settings screen of the target service, click on [Rotate Key] under [Signing Key].
1-3. Download the [New SAML Signing Certificate] from the popup screen.
You do not need to keep the popup screen open until the update of the SAML signing certificate is completed.
After downloading the new SAML signing certificate, even if you close it by clicking [Cancel] once, the same content will be displayed until you confirm the exchange by clicking on [Exchange] under [Key] again.
2. Upload the new SAML signing certificate to Google Workspace
2-1. Access the Google Workspace admin console and click on [Security].
2-2. Click on [Single sign-on (SSO) with third-party identity providers (IDPs)] under [Authentication] menu.
2-3. Click on [SSO profile for your organization] under the [Set up single sign-on (SSO) with third-party identity provider] menu.
If there is no setting in "SSO profile for your organization," please contact Customer Success Guide for assistance.
2-4. Click on the [REPLACE CERTIFICATE] link and upload the new SAML signing certificate obtained in step 1-3.
2-5. After uploading the new SAML signing certificate, click on [Save].
After saving the settings, please note that until you confirm the update of the SAML signing certificate on the HENNGE Access Control side in the next step 3-1,
single sign-on to Google Workspace will result in an error.
3. Confirm the replacement of the SAML signing certificate in HENNGE Access Control
3-1. (If you have closed the popup screen after step 1-3)
Click on [Rotate Key] under [Signing Key] by accessing the integration settings with Google Workspace from the "Connected Services" menu on the HENNGE Access Control administrator screen.
3-2. Check the checkbox at the bottom of the popup screen and click on the [Finalize] button at the bottom right.
By completing this process, single sign-on via SAML between HENNGE Access Control and Google Workspace will be resumed.
With this, the update of the signing certificate in the SAML integration with Google Workspace is completed.