---
title: "Configure Google Workspace as an Identity Provider"
date: "2026-06-22T11:35:18+00:00"
summary: "Set up Google Workspace as a SAML 2.0 IdP for Acquia SSO and let users authenticate with their corporate email."
image:
type: "page"
url: "/resources/configure-google-workspace-identity-provider"
id: "5a02be66-19dd-4c11-a8b2-aa6b4ebd3248"
---

Configure Google Workspace as a SAML 2.0 Identity Provider (IdP) for Acquia Single Sign-On (SSO). After you configure Google Workspace, users with your corporate email domain authenticate through Google Workspace to access Acquia products.

Prerequisites
-------------

To configure Google Workspace as an IdP, you must have the following prerequisites:

*   Active Cloud Platform subscription with SSO entitlement.
*   Organization administrator access in Acquia.
*   Google Workspace administrator access.
*   Verified domain in Acquia SSO console.

The following table explains the steps to Configure Google Workspace as an Identity Provider:

S.No.

Step

Description

1

Add and verify your domain in Acquia

Add your domain to the Acquia SSO console and verify its ownership.

2

Create custom SAML app in Google Workspace

Create a custom SAML app in Google to generate the initial identity provider metadata.

3

Add the Identity Provider in Acquia

To create the provider and generate Acquia metadata, enter Google metadata, such as entity ID, SSO URL, and certificate, in Acquia.

4

Complete the SAML app configuration in Google Workspace

Paste Acquia metadata into Google Workspace to finalize the application configuration.

5

Configure SAML attribute mappings

Map the exact first name, last name, and email attributes between Google and Acquia. 

6

Enable user access

Turn on the custom SAML application in Google Workspace to grant access to users. 

### Add and verify your domain in Acquia

Before configuring your Identity Provider, ensure that you add and verify your domain in the Acquia SSO management console. You cannot assign an Identity Provider without a verified domain. For detailed information, refer to [Adding a domain](/resources/using-acquia-single-sign-on#section-adding-a-domain "Using Acquia Single Sign-On").

### Create custom SAML app in Google Workspace 

To get the required details from Google Workspace:

1.  Sign in to the Google Admin console.
2.  Go to **Apps** > **Web** **and mobile apps**.
3.  Click **Add App** > **Add custom SAML** **app**.
4.  Enter a name for the application, for example, Acquia SSO, and click **Continue**.
5.  Copy the SSO URL and Entity ID, and download the Certificate. 
6.  Keep the browser session open.

### Add the Identity Provider in Acquia 

For detailed information, refer to [Adding an Identity Provider](/resources/using-acquia-single-sign-on#section-adding-an-identity-provider "Using Acquia Single Sign-On").

1.  In Acquia SSO, click **Add identity provider**.
2.  Enter a **Label**, select your verified **Domain** from the list, and paste the Google **Entity ID** and **SSO URL**.
3.  Open the downloaded Google Certificate in a text editor, copy its contents, and paste it into the **Public certificate** field.
4.  Click **Add identity provider**.
    
    The system displays the Service Provider details.
    
5.  Under Service provider details, copy Acquia **Entity ID** and **ACS URL**.

### Complete the SAML app configuration in Google Workspace 

To complete the configuration in Google Workspace:

1.  Return to your open Google Admin console browser session and select **Continue**.
2.  Paste Acquia ACS URL and Entity ID into the respective fields.
3.  Select **EMAIL** for the **Name ID** **format**.
4.  Select **Basic Information** > **Primary email for the Name ID**.
5.  Select **Continue**.

### Configure SAML attribute mappings

To map these Google directory attributes to the SAML app:

1.  On the Attribute mapping, click **Add mapping**.
2.  Map the Google directory fields to the following App attributes exactly as written:
    *   Basic Information > First name maps to `firstName`.
    *   Basic Information > Last name maps to `lastName`.
    *   Basic Information > Primary email maps to `email`.
3.  Click **Finish**.

### Enable user access 

To grant users access to the Acquia SSO app:

1.  Go to **Apps** > **Web and mobile apps** > Your SAML App.
2.  Click **User access**.
3.  Select ON for everyone or apply it to specific organizational units.
4.  Click **Save**.