Set Up Google Workspace SSO for JustCall

Single sign-on (SSO) lets your team log into JustCall using their Google Workspace credentials. This eliminates separate passwords, simplifies onboarding, and gives IT centralized access control. SSO is available on the Business plan.

Prerequisites

• JustCall Business plan
• Google Workspace admin access (Super Admin role)
• A verified email domain in JustCall

Step 1: Enable SSO in JustCall

1. Log into JustCall as an account owner or admin.
2. Go to Settings → Security → Single Sign-On.
3. Click Enable SSO.
4. Select SAML 2.0 as the protocol.
5. Copy the following values — you will need them in Google Workspace:
   • ACS URL (Assertion Consumer Service URL)
   • Entity ID (SP Entity ID)

Step 2: Create a Custom SAML App in Google Workspace

1. Log into the Google Admin Console.

2. Go to Apps → Web and mobile apps → Add app → Add custom SAML app.

3. Enter JustCall as the app name. Upload the JustCall logo if desired.

4. On the Google Identity Provider details page, copy:

   • SSO URL
   • Entity ID
   • Certificate (download the .pem file)

5. Click Continue.

6. On the Service Provider details page, enter:

   • ACS URL: Paste the ACS URL from JustCall
   • Entity ID: Paste the Entity ID from JustCall
   • Name ID format: EMAIL
   • Name ID: Basic Information > Primary email

7. Click Continue.

8. Add attribute mappings:

   Google Directory Attribute	JustCall Attribute
   Primary email	email
   First name	firstName
   Last name	lastName

9. Click Finish.

Step 3: Turn On the App for Users

1. In the Google Admin Console, go to Apps → Web and mobile apps → JustCall.
2. Click User access.
3. Select ON for everyone (or restrict to specific organizational units).
4. Click Save.

Changes can take up to 24 hours to propagate across Google Workspace.

Step 4: Complete Configuration in JustCall

1. Return to Settings → Security → Single Sign-On in JustCall.
2. Enter the values from Google:
   • SSO URL (Identity Provider SSO URL)
   • Issuer / Entity ID (Identity Provider Entity ID)
   • Certificate: Upload the .pem file you downloaded
3. Set Default Role for new SSO users (e.g., Agent, Admin).
4. Click Save Configuration.
5. Click Test Connection to verify the setup works.

Step 5: Verify Your Domain

1. In JustCall, go to Settings → Security → Domain Verification.
2. Copy the TXT record provided.
3. Add it to your domain's DNS settings.
4. Return to JustCall and click Verify Domain.

Domain verification ensures only users with email addresses on your domain can log in via SSO.

User Login Flow

Once SSO is active, team members can log in two ways:

• From JustCall: Go to the JustCall login page and click Sign in with SSO. Enter their company email. They are redirected to Google for authentication.
• From Google: Click the JustCall app tile in the Google Workspace app launcher (waffle menu).

Troubleshooting

Related Articles

• Set Up Azure AD SSO for JustCall
• Set Up Okta SSO for JustCall
• JustCall Security and Compliance
• Add or Remove Team Members