Create a SAML App for SSO in Google Workspace

To use Google as your identity provider while using single sign-on, configure the correct settings for your app integration.

1. Open the Google Workspace Admin Console.
2. Go to Apps then Web and mobile apps.
3. Click Add app and then Add custom SAML app.
4. Enter the App name and click Continue.
5. Scroll down to option 2 to find the values you need for SSO Setup. Copy the Entity ID field and download the certificate.
6. In the Own Data Platform, paste the Entity ID into the Identity Provider Issuer field, upload the certificate.
7. (Optional) To enable SP-Initiated sign in, enable SP-Initiated, copy the Sign On URL value from Google Workspace and paste it into the IdP SSO URL field.
8. Click Next.
   It may take a few minutes to verify your settings.
9. Once your settings are verified, the IdP Parameters will be displayed.
10. In Google Workspace, click Continue.
11. Enter the IdP Parameters from the Own Data Platform in the corresponding fields:

    Parameter in Own	Parameter in Google Workspace
    Audience URI (SP Entity ID)	Entity ID
    Single Sign-On URL	ACS URL
    Default RelayState	Start URL

12. In the Name ID format dropdown, select EMAIL.
13. Click Continue.
14. Click Finish.
    The Settings page for the newly created SAML App will open automatically.
15. Click User Access.
16. Set Service status to ON for everyone.
17. Click Save.