Skip to main content

How this works

You add Supamodel as an app in your Google Admin console, then turn it on for the people who should have access. Usually that means a Google group, such as one called Supamodel users. When someone in that group signs in, Google checks who they are and sends them to Supamodel. The first time, Supamodel creates their account automatically. Anyone you haven’t turned the app on for is refused by Google. You can then give or remove access whenever you like, without contacting us. Not sure this is the right option? See Sign in with Google to compare it with option 1.

Before you start

You need:
  • Super admin access to your company’s Google Workspace. If you don’t have it, ask your Google Workspace admin to follow this guide.
  • The ACS URL and Entity ID we sent you. If you don’t have them, ask us.
  • A Google group for the people who should have access, or an organisational unit. We recommend a group. You can create one now or in step 6.

Add Supamodel to Google Admin

1

Open the Google Admin console

Go to admin.google.com and sign in with your super admin account.
2

Create a custom SAML app

Go to Apps > Web and mobile apps. Click Add app > Add custom SAML app.
  • App name: Supamodel
  • Description and App icon: optional
Click Continue.
3

Download the metadata

On the Google Identity Provider details page, click Download metadata. This saves a file called GoogleIDPMetadata.xml. Keep it for later.Click Continue.
4

Enter the Supamodel details

On the Service provider details page, enter:
  • ACS URL: the ACS URL we sent you
  • Entity ID: the Entity ID we sent you
  • Start URL: leave empty
  • Signed response: leave unticked
  • Name ID format: EMAIL
  • Name ID: Basic Information > Primary email
Click Continue.
5

Map the user details

On the Attribute mapping page, click Add mapping three times and enter these values exactly:Supamodel uses these to create each person’s account. Click Finish.
6

Choose who can use Supamodel

Open the Supamodel app, then click User access. New apps start switched OFF for everyone.To allow a group:
  1. In the left-hand panel, click Groups.
  2. Search for your group, for example Supamodel users, and select it.
  3. Set Service status to ON.
  4. Click Save.
To allow an organisational unit instead, select it in the left-hand panel, set Service status to ON and click Save.
Don’t turn the app on for your whole organisation unless everyone at your company should be able to see your Supamodel data.
Google says changes can take up to 24 hours to apply, although they usually take a few minutes.

Send us the metadata

Email the GoogleIDPMetadata.xml file to [email protected]. It doesn’t contain any secrets, so email is fine. We connect it to your Supamodel account and let you know when it’s ready to test.

Test and switch over

1

Test with one person

We book a short call with you. Someone in your Supamodel group signs in with Google while we check everything works. Your current login keeps working throughout.You can also test the Google side yourself: open the Supamodel app in Google Admin and click Test SAML login.
2

Tell your team

Once the test passes, ask everyone in the group to reconnect. In Claude, they go to Customize > Connectors > Supamodel, click Disconnect, then Connect. Anyone who hasn’t added the connector yet can follow Connect Supamodel to Claude. On the sign-in page, they type their work email and continue with Google.
3

Agree a switch-off date

When everyone is using Google, we agree a date with you to switch off the old login.

Give or remove access later

To give someone access, add them to your Supamodel group in Google. They can sign in once Google applies the change. Their Supamodel account is created the first time they sign in. To remove someone’s access, remove them from the group, or suspend their Google account. Once Google applies the change, they can’t sign in again. They may stay connected for up to 12 hours, until their current session expires.
If you need someone’s access removed straight away, email us as well and we’ll remove them on our side.

Look after the Google app

The Supamodel app lives in your Google Admin console. Make sure at least one other admin at your company knows it exists and which group controls access. Google’s signing certificate for the app expires after 5 years. Google Admin shows the expiry date on the app’s page. Before it expires, create a new certificate in Google Admin and send us the new metadata file.

Troubleshooting

The app isn’t turned on for them yet. Check they’re in the right group, or wait for Google to apply the change. This can take up to 24 hours.
The Entity ID in Google Admin doesn’t match the one we sent you. Open the app, click Service provider details and check it.
Check the Attribute mapping in Google Admin. The app attribute names must match the table in step 5 exactly, including capital letters.

Need help?

Contact us at [email protected].