Google Workspace SSO

With Adjust’s support for Google Workspace SSO, you can use your Google Workspace credentials to sign in to Adjust. 

Note:
SSO is available as an add-on feature. To get this on your account, contact sales@adjust.com.

1. Set up in Google

You can sign in to Adjust through Google only if you have enabled SSO in your paid Google Workspace account. To set up Google Workspace SSO via SAML (Security Assertion Markup Language), follow these steps in the Google Admin console. 

  1. Find and select SAML apps.

  2. Select ADD ( + icon ) at the bottom right.

  3. Select Setup my own custom App.

  4. Download the IDP metadata file (option 2).

  5. Add Adjust as Application Name.

  6. Next, set up the following:

    1. ACS URL: https://api.adjust.com/accounts/users/saml/auth
    2. Entity ID: https://api.adjust.com/accounts/users/saml/metadata
    3. Start URL: https://dash.adjust.com
    4. Signed Response: enabled
    5. Name ID: Basic Information - Primary Email
    6. Name ID: Format - Email

  7. Now, set the following Attribute Mappings:

    1. Basic Information: First Name -> first_name
    2. Basic Information: Last Name -> last_name
    3. Basic Information: Primary Email -> primary_email

  8. Go to SAML Apps > Adjust > Settings to download your IdP metadata file.

Great job! Your setup in Google is done and you can move on to the final step in Adjust. 

2. Set up in Adjust

To complete setup for Google Workspace SSO, follow these steps.

  1. Sign in to your Adjust account using your regular credentials.

  2. Hover over (Profile icon).

  3. Select Account settings.

  4. Select the Security tab.

  5. Under Single sign-on (Google only), do the following:

    1. Enter your email domain. This is the domain used in your company email address. For example: if an employee email is john.doe@example.com, you need to enter example.com.

    Adjust uses the domain to know which users should be converted to SSO users. To enter multiple email domains at once, press the Enter key. For example: example.com, adjust.com. Once you have added a domain, it cannot be changed or deleted.

    1. Upload your IdP metadata file. Uploading the IdP metadata file saves your time as it automatically fills the credential fields.

  6. Select Save.

Sign in with SSO

There are two ways to sign in to Adjust as an SSO user.

From Google Workspace - Available for all users, required for first-time users

  1. Sign in to your Google Workspace account.
  2. Go to Google’s SAML apps selection - this is identified by the 9 dots in the top-right of the screen.
  3. Select the Adjust app.

You are sent to Adjust, signed in as the user associated with your Google Workspace account.

From Adjust - Available for existing users

  1. Go to the Adjust login page.
  2. Select Log in with SSO.
  3. Enter your Google workspace email address and select Next.
  4. Sign in with Google.

After successfully signing-in with your Google Workspace account, you are redirected back to Adjust. You are now logged in as the user associated with your Google Workspace account. 

Manage SSO users

  • When a new user logs in to Adjust through Google Workspace for the first time, Adjust creates their account with the default role permissions. You can change the user's permissions.
  • Users in your account will no longer be able to retrieve or reset API tokens from Adjust. Instead, reach out to your dedicated Account Manager or support@adjust.com.
  • If your team has granted access to users on non-SSO domains (for example, if you work with advertising agencies), those users can still log into Adjust directly.
  • Once you integrate SSO, you need to manage two-factor authentication (2FA) through Google Workspace for SSO users. Adjust will continue to manage 2FA for users on non-SSO domains, if you have enabled 2FA in Adjust.

FAQ

What is my IdP metadata file?