Steps to configure SAML SSO for Google Workspace

About Google Workspace

Google Workspace is a comprehensive suite of productivity and collaboration tools, including popular applications like Gmail, Calendar, Drive, and Meet, designed to enhance teamwork and efficiency for businesses of all sizes.

The following steps will help you enable single sign-on (SSO) for Google Workspace from Identity360.

Prerequisites

1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications. For more information, refer to pricing details.
2. Log in to Identity360 as an Admin or Super Admin.
3. Navigate to Applications > Application Integration > Create New Application, and select Google Workspace from the applications displayed.
   Note: You can also find Google Workspace from the search bar located at the top.
4. Under the General Settings tab, enter the Application Name and Description.
5. Under the Choose Capabilities tab, choose SSO and click Continue.
   General Settings of SSO configuration for Google Workspace
6. Under Integration Settings, navigate to the Single Sign On tab, click Metadata Details.
   • Copy the Login URL and Logout URL, which will be used during the configuration of Google Workspace.
   • Download the SSO certificate by clicking Download from the Signing Certificate field.
     Integration Settings of SSO configuration for Google Workspace

Google Workspace (service provider) configuration steps

1. Log in to Google Workspace with admin's credentials.
2. Navigate to Security -> Authentication -> SSO with third-party IdP -> click ADD SSO PROFILE.
   Portal view of Google Workspace
3. Under the Third-party identity provider configuration pane, tick the checkbox Set up SSO with third-party identity provider, and paste the Login URL and Logout URL values copied in step 6a of the prerequisites section in the Sign-in page URL and Sign-out page URL fields, respectively.
4. Upload the signing certificate file downloaded in step 6b of the prerequisites section in the Verification Certificate field.
5. Click Save.
   Configuration of SAML SSO in Google Workspace

Identity360 (identity provider) configuration steps

1. Switch to Identity360's application configuration page.
2. In the Domain Name field, enter the domain name of your Google Workspace account. For example, if you use johndoe@google.com to log in to Google Workspace, then google.com is the domain name.
3. Enter the Relay State parameter, if necessary.
   Note: Relay State is an optional parameter used with a SAML message to remember where you were or direct you to a specific page after logging in.
4. Click Save.
   Integration Settings of SSO configuration for Google Workspace
5. To assign this application to specific users, refer to this page.

Your users should now be able to sign in to Google Workspace through the Identity360 portal.