Guides

Set up SAML with Google Workspace

Step by step: register a SAML application in Google Workspace, then check the sign-in with ID-Kit.

Replace the example addresses with those of your application. Labels may vary depending on the product version.

The steps

  1. Admin console → Applications → Web and mobile apps → Add app → Add custom SAML app.

  2. "Google Identity Provider details" step: download the metadata (Google gives no address) then import it into ID-Kit by pasting the file content.

  3. “Service provider details” step: ACS URL = https://app.example.com/saml/acs ; Entity ID = https://app.example.com/saml/metadata ; Format de l'ID de nom = EMAIL ; ID de nom = Adresse e-mail principale.

  4. Finish, then User access: set the application to "Enabled for everyone" (otherwise: error app_not_enabled_for_user).

Check the sign-in

Start a sign-in, get the SAML response, then paste it into theanalyseur : ID-Kit checks the signature, audience, receiving address and clock.

Common errors

Create a test identity providerAll guides