# SAML with Google Workspace

{% hint style="info" %}
This process can only be fully achieved in collaboration with our team. 

Exact instructions are provided in the impacted sections below where this exchange of information is required.
{% endhint %}

## Create a new SAML App in your Google Workspace

In order to connect your Google Workspace to Rely.io you need to create a dedicated App by following the steps below.

1. Log into your [Google Admin Console](https://admin.google.com/) as an Admin with elevated rights or as a [Super Admin](https://support.google.com/a/answer/6087519?hl=en#zippy=%2Cstep-add-the-custom-saml-app).
2. In the main navigation menu on the left, go to **Apps -> Web and mobile apps**<br>

   <figure><img src="/files/vSH544b9Svo4w2d9Ycvm" alt=""><figcaption><p>Navigate to Applications</p></figcaption></figure>
3. In the action menu select **Add app -> Add custom SAML app**<br>

   <figure><img src="/files/S51aRhcDafryQHbeCwWb" alt=""><figcaption><p>Add SAML Application</p></figcaption></figure>
4. Define a Name for your app, e.g.  `Rely` then click **\[Continue]**<br>

   <figure><img src="/files/fROPWxdenRHYoyfI0MG9" alt=""><figcaption><p>Set name for Application</p></figcaption></figure>
5. In the following screen, gather the following information:
   1. **Copy the SSO URL** and store it for later use
   2. **Download the Certificate** as a `.pem` file

      <figure><img src="/files/DelGEFOXAeIJySU3DY24" alt=""><figcaption><p>Download Certificate </p></figcaption></figure>
6. **Send the SSO URL and Certificate to Rely.io** via one of the following means:
   1. Direct outreach to your dedicated Customer Success Manager
   2. In Slack via your Dedicated Channel (for Enterprise customers)
   3. Via your in-product chat bot
   4. Via email to <support@rely.io>
7. You will receive in return a confirmation as well as a `<connexion-name>` to be used in next step.
8. Click **Continue** and configure the following parameters:
   1. ACS URL: `https://auth.rely.io/login/callback`
   2. Entity ID: `urn:auth0:relyio:<connection-name>`

      <figure><img src="/files/yolvLc0SlZcejXx9FMxt" alt=""><figcaption><p>Configure Callback url and audience</p></figcaption></figure>
9. Click **Continue** and add the following mapping:

   <figure><img src="/files/ywfsvfIOE5QERYIFkIPl" alt=""><figcaption><p>Define SAML Attributes</p></figcaption></figure>

   In each section, set the App attribute as follows:

   1. Basic Information:&#x20;
      1. **Primary email** -> `email`
      2. \[ADD MAPPING]: **First name** -> `given_name`
      3. \[ADD MAPPING]: **Last name** -> `family_name`
   2. Group membership (optional)
      1. Select from the dropdown menu the **Google groups** to be imported. Learn more about Group mapping in [Google's official documentation](https://support.google.com/a/answer/11143403?hl=en).
      2. **Google groups**  -> `groups`
10. Click **Finish** to end the configuration and save your new Rely SAML App.
11. Validate that you can now find Rely.io in your Google Workspace.

    <figure><img src="/files/69zSENUfvSYPcGd0By61" alt=""><figcaption><p>Rely.io in Google Workspace</p></figcaption></figure>

That's it! You're SAML Connection to Rely.io from your Google Workspace is now ready for your users to use.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.rely.io/security-and-compliance/single-sign-on-sso/saml-with-google-workspace.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.