Google Workspace SAML Configuration

Configure Single Sign-On with Google Workspace using the SAML protocol. The setup is completed in two steps in the imper.ai Single Sign-On (SAML) Configuration dialog: first you import the Google metadata into imper.ai, then you register imper.ai in Google.

Step 1: Add Identity Provider Metadata

In the imper.ai SSO dialog, select Google as your identity provider, then provide the metadata from your Google custom SAML app. Choose one of the two methods.

Option A: Upload the metadata XML file

1. In the Google Admin console, navigate to Apps > Web and mobile apps and select Add custom SAML app.

2. On the Google Identity Provider details screen, download the IdP metadata (.xml) file.

3. In imper.ai, select Metadata XML file upload and click Upload to import the .xml file.

Option B: Enter the metadata manually

In imper.ai, select Manually add metadata and copy the following values from the Google Identity Provider details screen:

• SSO URL - for example, https://accounts.google.com/o/saml2/idp?idpid=XXXXX

• Entity ID - for example, https://accounts.google.com/o/saml2?idpid=XXXXX

• Certificate (Base 64) - paste the X.509 certificate

When finished, click Continue.

Step 2: Configure your Identity Provider

imper.ai now displays the values you need to register the application in Google.

1. Copy the Entity ID.

2. Copy the ACS URL.

3. In the Google custom SAML app's Service provider details, paste the Entity ID into the Entity ID field and the ACS URL into the ACS URL field.

4. Back in imper.ai, click Done to save the configuration.