Google Apps as IdP – SAML

Step 1: Setup Google Apps/G Suite as Identity Provider

Follow the following steps to set up Google Apps / G Suite as an Identity Provider


  Login as Administrator


• Go to https://admin.google.com and login with your G Suite administrator account.
• Navigate to the Apps tab in the left menu and click on Web and mobile apps.

  Add a SAML app


• Click on the Add App button, then in the dropdown select Add Custom SAML app tab to create a new saml app.

• Enter details for your custom SAML app and click on Continue button.

  IDP Information


• Click on Download Metadata button. This will be used for configuring your Service Provider.
• You can also copy G Suite details like SSO URL, entity ID and Certificate to configure the Service Provider manually and then click on Continue button.

  Service Provider Details


• Enter details from the Service Provider Metadata tab in the SAML SP plugin.

ACS URL	Copy and paste the ACS URL from the plugin.
Entity ID	Copy and paste the SP Entity ID/ Issuer from the plugin.
Signed Response	Check Signed Response ✓
Name ID Format	EMAIL

• Click on Continue button.

  Attribute Mapping


• Click on Add Mapping button.

• Add and select user fields in Google Directory, then map them to Service Provider attributes and Click on Finish button.

  Turn on


• Go to SAML Apps again and click on OFF for everyone .

• Then, select ON for everyone to activate SSO.
• Note: All the users will be asked to SSO to access G Suite Apps and they will not be able to login normally using a username and password.