---
schema_version: "1"
id: 9b932a43623cea58896950e153579977d27a3a7e6a79954484cf9a561bc09bcd
title: Create a SAML App for SSO in Google Workspace
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/platform_o_sso_app_for_google.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.platform_o_sso_app_for_google.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: fff16be751d52c07a21126f76b360c0850003157ca8e81c805a53635d1215eac
description: To use Google as your identity provider while using single sign-on, configure the correct settings for your app integration.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Create a SAML App for SSO in Google Workspace

To use Google as your identity provider while using single sign-on, configure the correct settings for your app integration.

Refer to Google's [Set up your own custom SAML app documentation](https://support.google.com/a/answer/6087519).

1. Open the Google Workspace Admin Console.
2. Go to Apps then Web and mobile apps.
3. Click Add app and then Add custom SAML app.
4. Enter the App name and click Continue.
5. Scroll down to option 2 to find the values you need for SSO Setup. Copy the Entity ID field and download the certificate.
6. In the Own Data Platform, paste the Entity ID into the Identity Provider Issuer field, upload the certificate.
7. (Optional) To enable SP-Initiated sign in, enable SP-Initiated, copy the Sign On URL value from Google Workspace and paste it into the IdP SSO URL field.
8. Click Next.
    
    It may take a few minutes to verify your settings.
9. Once your settings are verified, the IdP Parameters will be displayed.
10. In Google Workspace, click Continue.
11. Enter the IdP Parameters from the Own Data Platform in the corresponding fields:
    
     
    | Parameter in Own | Parameter in Google Workspace |
    | --- | --- |
    | Audience URI (SP Entity ID) | Entity ID |
    | Single Sign-On URL | ACS URL |
    | Default RelayState | Start URL |
12. In the Name ID format dropdown, select EMAIL.
13. Click Continue.
14. Click Finish.
    
    The Settings page for the newly created SAML App will open automatically.
15. Click User Access.
16. Set Service status to ON for everyone.
17. Click Save.