Creating a SAML App for SSO in Google Workspace

If you choose to use Google as your identity provider while using single sign on, follow this guide to ensure the correct settings for your app integration or refer to Google's Set up your own custom SAML app documentation.

1. Open the Google Workspace Admin Console.
2. Navigate to Apps → Web and mobile apps.
3. Click Add app → Add custom SAML app.
4. Enter the App name and click Continue.
5. Scroll down to option 2 to find the values you need for SSO Setup. Copy the Entity ID field and download the certificate.
6. In the Own Data Platform, paste the Entity ID into the Identity Provider Issuer field, upload the certificate, and click Next.
   It may take a few minutes to verify your settings.
   
7. Once your settings are verified, the IdP Parameters will be displayed.
   
8. In Google Workspace, click Continue.
9. Enter the IdP Parameters from the Own Data Platform in the corresponding fields:

   Parameter in Own	Parameter in Google Workspace
   Audience URI (SP Entity ID)	Entity ID
   Single Sign-On URL	ACS URL
   Default RelayState	Start URL

   
10. In the Name ID format dropdown, select EMAIL.
11. Click Continue.
12. Click Finish. The Settings page for the newly created SAML App will open automatically.
13. Click User Access.
14. Set Service status to ON for everyone.
15. Click Save.