SSO Setup

The main area where customers will get incorrect is around Setting Attributes. See below for a working example from the Google Admin side and the Bronto side. App attributes can be anything in Google as long as they match exactly what you declare in Original Attribute fields in Bronto:

If I want to edit the Role of a user added via group mapping, where should I do this?

Group mapping takes priority so if a user needs to be a different role they need to be mapped to it on the SSO provider/ Google side. Roles are addictive so they can be in a readonly group and a standard group and once mapping on Bronto is created they will have RO and Standard roles.