SSO Configurations identity provider - Google workspace
Last updated
Last updated
For SSO setup, we will send the SSO setup link to the user via email. The user can then click on the link from their email to proceed with the setup.
When the user opens the link, they will see a screen like this. They need to click on "SSO Configuration" to begin the setup process.
After clicking on SSO Configuration, the user will see a screen like this. From here, they need to select their Identity Provider (IdP) — for Idp Google click on Google Workspace
once the user clicks on Google Workspace, they will see the SAML button appear. They need to click on the SAML button to proceed with setting up SSO using the SAML protocol.
Log in to your Google Admin Console.
From the left-hand sidebar, go to Apps.
Under Apps, select Web and mobile apps.
Click on the Add app dropdown.
Choose Add custom SAML app.
Under Add custom SAML app
, enter a meaningful App name
and press continue
.
Copy the SSO URL
, Entity ID
and Certificate
values.
Paste the value here, scroll down, and press Continue.
Copy the ACS URL and Entity ID from here, then paste them into the corresponding fields in the Google Admin Console.
scroll down, and press Continue.
In the attribute mapping part, map Primary email
to email
. You can also add more mappings if needed.
scroll down, and press Continue.
To make the managed app available to users, select user access
and change the service status to ON for everyone
.
press Continue.
The below domains are used to determine which SSO configuration to load once a user chooses to authenticate using SSO.
Press continue, Then go to the Testing, save, and Test.