> For the complete documentation index, see [llms.txt](https://docs.rely.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.rely.io/security-and-compliance/single-sign-on-sso/saml-with-google-workspace.md).

# SAML with Google Workspace

{% hint style="info" %}
This process can only be fully achieved in collaboration with our team. 

Exact instructions are provided in the impacted sections below where this exchange of information is required.
{% endhint %}

## Create a new SAML App in your Google Workspace

In order to connect your Google Workspace to Rely.io you need to create a dedicated App by following the steps below.

1. Log into your [Google Admin Console](https://admin.google.com/) as an Admin with elevated rights or as a [Super Admin](https://support.google.com/a/answer/6087519?hl=en#zippy=%2Cstep-add-the-custom-saml-app).
2. In the main navigation menu on the left, go to **Apps -> Web and mobile apps**<br>

   <figure><img src="/files/vSH544b9Svo4w2d9Ycvm" alt=""><figcaption><p>Navigate to Applications</p></figcaption></figure>
3. In the action menu select **Add app -> Add custom SAML app**<br>

   <figure><img src="/files/S51aRhcDafryQHbeCwWb" alt=""><figcaption><p>Add SAML Application</p></figcaption></figure>
4. Define a Name for your app, e.g.  `Rely` then click **\[Continue]**<br>

   <figure><img src="/files/fROPWxdenRHYoyfI0MG9" alt=""><figcaption><p>Set name for Application</p></figcaption></figure>
5. In the following screen, gather the following information:
   1. **Copy the SSO URL** and store it for later use
   2. **Download the Certificate** as a `.pem` file

      <figure><img src="/files/DelGEFOXAeIJySU3DY24" alt=""><figcaption><p>Download Certificate </p></figcaption></figure>
6. **Send the SSO URL and Certificate to Rely.io** via one of the following means:
   1. Direct outreach to your dedicated Customer Success Manager
   2. In Slack via your Dedicated Channel (for Enterprise customers)
   3. Via your in-product chat bot
   4. Via email to <support@rely.io>
7. You will receive in return a confirmation as well as a `<connexion-name>` to be used in next step.
8. Click **Continue** and configure the following parameters:
   1. ACS URL: `https://auth.rely.io/login/callback`
   2. Entity ID: `urn:auth0:relyio:<connection-name>`

      <figure><img src="/files/yolvLc0SlZcejXx9FMxt" alt=""><figcaption><p>Configure Callback url and audience</p></figcaption></figure>
9. Click **Continue** and add the following mapping:

   <figure><img src="/files/ywfsvfIOE5QERYIFkIPl" alt=""><figcaption><p>Define SAML Attributes</p></figcaption></figure>

   In each section, set the App attribute as follows:

   1. Basic Information:&#x20;
      1. **Primary email** -> `email`
      2. \[ADD MAPPING]: **First name** -> `given_name`
      3. \[ADD MAPPING]: **Last name** -> `family_name`
   2. Group membership (optional)
      1. Select from the dropdown menu the **Google groups** to be imported. Learn more about Group mapping in [Google's official documentation](https://support.google.com/a/answer/11143403?hl=en).
      2. **Google groups**  -> `groups`
10. Click **Finish** to end the configuration and save your new Rely SAML App.
11. Validate that you can now find Rely.io in your Google Workspace.

    <figure><img src="/files/69zSENUfvSYPcGd0By61" alt=""><figcaption><p>Rely.io in Google Workspace</p></figcaption></figure>

That's it! You're SAML Connection to Rely.io from your Google Workspace is now ready for your users to use.