How can we help you today?

Configure single sign-on with Google

Modified on: Wed, 18 Mar, 2020 at 11:26 AM

Applies to: Basic Business Enterprise
⬢ Only Team Admins can utilize the features discussed in this solution.

To use SAML 2.0 Authentication with Google Apps, add a new Google SAML Application. Then go to Service Provider Details:

  • ACS URL must be set to the Assertion Consumer Service URL of your Team, which can be found on, on the right sidebar

  • Entity ID is something you can make up. The URI doesn't need to exist, but it *must* be copy-pasted into your Team auth settings, as the Issuer

  • Start URL is not needed

Now go to Add New Mapping. You must have at least one parameter for the user display name and one for the user email. These are the custom parameters we have configured for this example:

We must now setup our Team for using this Google SAML app. Open the Team Auth Settings page on a separate tab:

You'll need to fill the following fields according to what you got on your Google App:

  • Single Sign-On Service Url: that's the SSO URL seen above

  • Single Sign-On Service Protocol Binding: do not change, leave as POST

  • Issuer and Audience Restriction: that's the Ent ID seen above

  • Display Name Assertion: should match the attribute, on the Attribute Mapping tab, for the user display name

  • Email Address Assertion: should match the attribute, on the Attribute Mapping tab, for the user email

  • Leave all checkboxes unchecked

  • Identity Provider Certificates: copy and paste the certificate for your Google SAML setup. This can be found by downloading the Certificate

This is how you should setup your Team for the settings above:

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.