Skip to main content

Google Workspace SSO Setup (Step-by-Step)

Below are the recommended steps to configure SAML SSO between Google Workspace and SINAI.

1. Create a new SAML App

  1. Go to the Google Admin Console: https://admin.google.com

  2. From the homepage, navigate to:
    ​Apps → Web and mobile apps

  3. Click Add App → Add custom SAML app

  4. Enter an app name (e.g., SINAI SSO)

  5. (Optional) Upload a logo

  6. Click Continue

2. Download Identity Provider Metadata

  1. On the Google Identity Provider details screen:

    • Copy the SSO URL

    • Copy the Entity ID

  2. Click Download Metadata (XML file)

➡️ You will provide this information to SINAI later. Click Continue.

3. Configure Service Provider Details

  1. Enter the values provided by SINAI:

    • ACS URL → provided by SINAI

    • Entity ID → provided by SINAI

    • Start URL → (optional, SINAI login page if provided)

  2. Set Name ID format:

    • Select EMAIL

  3. Set Name ID:

    • Select Primary email

  4. Click Continue

4. Configure Attribute Mappings

  1. In the Attribute Mapping section, add the following mappings:

SINAI Attribute

Google Directory Attribute (depending on account configuration)

email

Primary email

given_name

First name

family_name

Last name

  1. Click Finish

5. Turn On the App for Users

  1. After creating the app, click into it

  2. Click User access

  3. Select:

    • ON for everyone, or

    • ON for specific organizational units/groups

  4. Click Save

⚠️ Only users with access enabled will be able to log in via SSO.

6. Send Metadata to SINAI

Provide SINAI with one of the following:

  • Metadata XML file (downloaded earlier)

  • Or the following values:

    • SSO URL

    • Entity ID

    • Certificate

SINAI will use this to complete the trust configuration.

7. Test SSO

  1. Open the SINAI login page

  2. Attempt login using your Google Workspace account

During testing, verify:

  • Successful login flow

  • Correct user attributes passed

  • Email matches an existing SINAI user

8. Enable SSO

Once testing is successful, SINAI will enable SSO for your organization.

Notes & Best Practices

  • Users must already exist in SINAI before logging in

  • Ensure the Primary email matches the SINAI account email

  • If using multiple domains, confirm with SINAI which domains are enabled

  • Roll out access gradually using Google Organizational Units or Groups

  • Keep at least one non-SSO admin login as backup

Related Articles
How to Configure Single Sign-On (SSO)
Microsoft Entra ID (Azure AD) SSO Setup (Step-by-Step)
Did this answer your question?