Skip to main content

Single Sign-On with Google Workspace offers a quick integration for SSO with Google Workspace.

Request SSO access from


Only account admins can request single sign-on access for their accounts.

To set up your Google Workspace SSO, you'll first need to email and write that you want to set up Google Workspace SAML SSO for

Include these items in the message:

The Support team will respond with the connection information needed to set up your Google Workspace SSO.

Set a custom SAML app in Google Workspace

Log into your Google Workspace panel.

In the sidebar, navigate to Apps > Web and mobile apps. Click on Add app and choose the Add custom SAML app option.

Create SAML app

Name your application and click Continue. In the Google Identity Provider details screen, copy the Entity ID and download the certificate.

Download certificate

Continue to the next screen. Enter the ACS URL and Entity ID given to you by support; change the Name ID format to EMAIL, and set the Name ID to Basic Information > Primary email.

Set entity ID

Continue to the final screen. Edit the Google Directory attributes to Basic Information - Primary email, and set App attributes to email.

Set entity ID

Click on Finish to add the custom SAML app.

Send your SAML details to

Draft a new email to Support, and include these items:

  • Your zipped SAML Signing Certificate (from the previous step).

When Support has received the information and created your Google Workspace + connection, you’re done! You can start logging in to through your Google Workspace account.

Google Workspace SSO groups

When creating access groups for Google Workspace, you need to add a custom attribute to connect it to your SAML application.

First, add a custom attribute and link it to your SAML app.

Open your SAML app, navigate to the SAML attribute mapping section, and click Configure SAML attribute mapping.

In the Attributes section, add the custom attribute you've just created and set the app attribute of your choice.


When using a Custom Attribute, you must update every user manually with a string.

Set group SSO

Next, you can add Group membership information by selecting the relevant groups from your account.

Set groups

Click Save to apply the changes.