--- title: "Configuring SAML SSO with Google" slug: "configuring-saml-sso-with-google" description: "How to configure SAML SSO with Google in RapidIdentity" tags: ["Administrator", "How-To", "Shibboleth"] updated: 2023-08-09T23:06:18Z published: 2023-08-09T23:06:18Z canonical: "help.rapididentity.com/configuring-saml-sso-with-google" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.rapididentity.com/llms.txt > Use this file to discover all available pages before exploring further. # Configuring SAML SSO with Google ## Configuring SAML SSO with Google Google supports a [SAML-based Single Sign-On service](https://support.google.com/a/answer/6087519?hl=en) for its web-based application to configure your Identity Provider (IdP) server connection. In the information provided in the link above, the third-party identity provider is Identity Automation through RapidIdentity Federation. The preliminary SAML authentication configuration steps require that both RapidIdentity Portal and RapidIdentity Federation IdP are internet accessible and are configured as described. Follow these steps to configure G Suite for SAML. A G Suite Admin Console login is required to complete this configuration. ***Note:*** *Google may update their setup sequence without notification, therefore, the steps below may vary slightly.* **Launch the Identity Provider Configuration Workspace** 1. From the RapidIdentity Configuration Module, select **Identity Providers** from the Security menu. ![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/configuring-saml-sso-with-google-image-h9g9iqwm.png) 2. The Identity Provider Configuration workspace will launch. ![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/configuring-saml-sso-with-google-image-19bxrbsc.png) 3. Click **Download the certificate used by the Identity Provider (.pem)**to download the certificate. 1. Keep this browser window open as the Base URL and Logout URL are necessary during upcoming steps. At that time, the certificate will be uploaded to the G-Suite Admin portal. **Set up SSO in the G Suite Admin Console** 1. In a different browser window, login to [Google Admin Console](https://support.google.com/a/answer/182076) 2. Navigate to **Menu ![""](https://storage.googleapis.com/support-kms-prod/JxKYG9DqcsormHflJJ8Z8bHuyVI5YheC0lAp)****-> Security -> Authentication -> SSO with third party IdP** 3. Click **Set up single sign-on (SSO) with a third party IdP.** ![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-08-09%20at%205.36.52%20PM.png) 4. Click on Third Party profile for your organization to set your settings 5. For the Third-party Identity Provider section, enter the information as described below: 1. Sign-in Page URL **- https://YOUR-RAPIDIDENTITY-TENET/idp/profile/SAML2/Redirect/SSO** 2. Sign-out Page URL -  **https://YOUR-RAPIDIDENTITY-TENET/idp/logout** 3. Use a domain-specific issuer - **OFF** 4. Change Password URL - **https://YOUR-RAPIDIDENTITY-TENET** 5. Click **REPLACE CERTIFICATE** to upload the certificate that was downloaded in from RapidIdentity. 6. Click **Save** at the bottom of the page to save the configuration.![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-08-09%20at%205.38.54%20PM.png) 6. Click on **Domain Specific URLs** from the S**SO with third party IdP screen** and set this setting to **Automatically redirect users to the third party IDP in the following SSO Profile![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-08-09%20at%205.41.59%20PM.png)** 7. **Create a SAML 2.0 Federation Partner for G Suite** 1. In the RapidIdentity **Configuration** module, click **Federation Partners** from the **Identity Providers** section. ![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/configuring-saml-sso-with-google-image-5svz559e.png) 2. Click the **Add Federation Partner** drop-down button and select **SAML 2.0**.![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-08-09%20at%205.47.50%20PM.png) 8. Click **Create SAML Relying Party![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-08-09%20at%205.48.17%20PM.png)** 9. Open the **General** section 1. set the **Name** and **Description**to be Google Apps and Copy Paste the markup code snippet into the **METADATA** field and be sure to change the **YOURDOMAINHERE** to your google domain![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-08-09%20at%205.51.31%20PM(2).png) 2. ```markup urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified ``` 10. Open the **SSO Settings** section and set the values to match below and click Save![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-08-09%20at%205.59.41%20PM.png) 11. Open the **Attribute Mapping** and Add the Attributes Below (if you do not have these attributes you can click the **Add New Attribute+![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-08-09%20at%206.03.42%20PM.png)** 12.Click Save 13. Click on **IDP Configuration** form the **Security** Menu and click on **Trigger Service Reload** and **Trigger Web Reload** at the bottom![](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Screenshot%202023-08-09%20at%206.05.27%20PM.png) #### ####