Google Workspace SSO Setup Guide
Configure SAML 2.0 Single Sign-On with Google Workspace (formerly G Suite)
Add a Custom SAML App#
- Sign in to your Google Admin console (admin.google.com)
- Go to Apps → Web and mobile apps
- Click Add App → Add custom SAML app
- Enter "ViksaAI" as the app name and click Continue
Download Google IdP Metadata#
On the Google Identity Provider details page, copy or download:
- SSO URL — your IdP SSO URL
- Entity ID — your IdP Entity ID/Issuer
- Certificate — download the certificate
Click Continue.
Configure Service Provider Details#
Enter the following values:
| Field | Value |
|---|---|
| ACS URL | https://api.viksaai.com/auth/auth/sso/saml/callback |
| Entity ID | https://viksaai.com/saml/metadata |
| Start URL | https://app.viksaai.com/login |
| Name ID format | EMAIL |
Click Continue.
Configure Attribute Mapping#
Add these attribute mappings:
| Google Directory attribute | App attribute |
|---|---|
| Primary email | email |
| First name | first_name |
| Last name | last_name |
Click Finish.
Enable the App for Users#
- In the app details, click User access
- Select ON for everyone or specific organizational units
- Click Save
Configure ViksaAI#
- Go to Settings → SSO in ViksaAI
- Select SAML 2.0 and Google Workspace
- Enter your email domain
- Paste the IdP details from Step 2
- Complete domain verification and enable SSO