Google Workspace SAML Setup

Configure Google Workspace as your SAML identity provider for Doow single sign-on.

See Google's Set up your own custom SAML app guide for full details.

Create a custom SAML app

1. Sign in to the Google Admin console as a super administrator.
2. Go to Menu → Apps → Web and mobile apps.
3. Click Add app → Add custom SAML app.
4. Enter an app name (e.g., "Doow"), optionally upload an icon, then click Continue.

Get IdP values for Doow

5. On the Google Identity Provider details page, copy the SSO URL, Entity ID, and download the Certificate. Click Continue.

Configure service provider details

6. On the Service provider details page:
   • Paste the ACS URL from Doow into ACS URL.
   • Paste the Entity ID from Doow into Entity ID.
   • Set Name ID format to EMAIL.
   • Set Name ID to Primary email.

Configure attribute mappings

7. Click Continue, then add attribute mappings:

   • firstName → First name
   • lastName → Last name
   • email → Primary email

8. Click Finish.

Enable for users

9. Go to the app, click User access, and turn the app ON for your organizational units.

Next steps

Return to SAML SSO and complete Step 2 to configure Doow with the IdP values you collected.