Skip to main content

SAML Single Sign-on 🔐 with Google workspace as the Identity Provider

How to setup SAML SSO with Google workspace as the Identity Provider (IdP)?

Written by Mohamed Berrada

Before proceeding with this article, ensure that you have read our article about SAML Single Sign-on 🔐

Here, we will outline the steps to set up Google workspace as an Identity Provider.

1️⃣ Create a Google SAML Web application

  1. Go to the Google Admin console and sign in with an administrator account

  2. Click on Apps, then Web and mobile apps in the left-hand navigation menu

  3. Click on Add app, then Add custom SAML app

  4. Enter a name for your application (e.g. "Fabriq") and click on Continue

  5. Download the Metadata file and click on Continue

2️⃣ Configure the application for SAML SSO

  1. On the Service provider details page, fill in the:

    • ACS URL

    • Entity ID

  2. Set the Name ID format to EMAIL and Name ID to Primary email

  3. Click on Continue

3️⃣ Configure the attributes for SAML SSO

Add the following attribute mappings by clicking on ADD MAPPING:

4️⃣ Assign users to Fabriq

  1. Click on the User access section

  2. You can either turn on the service status:

    1. for everyone in your organization

    2. for specific groups / organizational units

Did this answer your question?