> For the complete documentation index, see [llms.txt](https://support.docstudio.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.docstudio.com/admin-panel/account-settings/how-to-set-up-sso-with-google.md).

# ​How to Set Up SSO with Google

#### Single Sign-On (SSO) Providers

**Single Sign-On (SSO)** is an authentication method that allows users to securely log in to different applications, platforms or websites using only one set of credentials

Single sign-on (SSO) works based on a trust relationship between an application known as a service provider and an identity provider (IdP), such as Google, Okta, OneLogin, Microsoft AD FS, etc.\
This trust relationship is often based on a certificate exchanged between the identity provider and the service provider

<div align="center"><img src="https://ucarecdn.com/19ebc62a-8445-4134-9fb1-c63caa00a859/image.png" alt=""></div>

**Benefits of Using SSO:**

* Users can authenticate using their existing credentials without repeatedly entering them for different applications.
* Your existing IdP remains the system of record for user authentication.
* You do not need to synchronise passwords with your IdP provider.

In DocStudio, you can set up Single Sign-On, allowing employees to access the platform through their Identity Provider (IdP), which streamlines the login process by eliminating passwords for secure and fast access.

DocStudio's SSO system is based on Security Assertion Markup Language 2.0 (SAML 2.0). SAML is designed to enable single sign-on for web applications across different domains, and SAML 2.0 is the leading industry standard for exchanging authentication and authorisation data.

In the SSO Providers tab, you can add your SSO providers to configure SSO authentication for your corporate users. To create an SSO provider, click the corresponding button and complete the fields in the modal window:

<figure><img src="/files/DFfdzhs5kVqmE9s3GHPe" alt="" width="375"><figcaption></figcaption></figure>

You can choose the type of metadata to use (either URL or XML). Once all the information is filled out, click the <img src="/files/F0ede5xeVlYuP0oLQGBt" alt="" data-size="line"> button.

Providers added this way can be edited or deleted, with deletion requiring confirmation:

![](https://ucarecdn.com/01aedd4d-ea9c-44bf-b2f7-cd66756a3964/image.png)

![](https://ucarecdn.com/57afa0e3-fd1c-4e07-baae-8e4c64f5c414/image.png)

***

#### Setting Up SSO with Google

To initiate the setup, log in to **admin.google.com** using an administrator account for Google services, such as Google Workspace or Cloud Identity:

<figure><img src="/files/mrHvG91eTuh7Wf7dyyem" alt=""><figcaption></figcaption></figure>

Next, navigate to Applications -> Mobile and Web Applications from the menu:

![](https://ucarecdn.com/9a245abd-c58e-44f4-9c55-ca9758e7eea4/image.png)

If this is your first time setting up SSO, you will not see the SAML application in your list; you will need to select ‘Add’ > ‘Add custom SAML application’:

![](https://ucarecdn.com/f869160b-6238-45ca-9dc4-24a5467a74d2/image.png)

In the form that opens, specify the name of the new application, attach an icon if needed, and click ‘Continue’:

![](https://ucarecdn.com/0d3573bf-dc14-42c2-8166-df00b46afeb9/image.png)

Google will provide connection data in two options; we recommend using ‘Upload metadata’ in one file and then clicking ‘Continue’ to proceed with the settings:

![](https://ucarecdn.com/f6d16805-caaf-4f6c-8bb0-3df621a1f591/image.png)

In the next window, fill in the connection data for the DocStudio platform:

* ACS URL = <https://api.docstudio.com/saml/SSO>
* Entity ID = <https://api.docstudio.com/saml/metadata>

Also, select the name identifier (which in our case is an email), then click ‘Continue’ to proceed with the setup:

![](https://ucarecdn.com/cf9624b9-89f2-4d18-918c-ee38347fd8b6/image.png)

For DocStudio, the required attributes are First Name and Last Name, so you will need to ensure these attributes are provided:

![](https://ucarecdn.com/cf81623d-c237-4088-b886-3b2e476c3015/image.png)

Once you have completed the settings on the Google side as an Identity Provider (IdP), the application should appear in the list of Mobile and Web Apps. You can access the app to view its settings:

![](https://ucarecdn.com/c896bf2a-df76-485c-8375-92cc2c3e895f/image.png)

To complete the settings on the DocStudio side when creating an SSO provider, you need to select the metadata type ‘XML’, copy and paste the content from the previously uploaded Google metadata file (the file is available in the application settings) and click the ‘Add’ button:

![](https://ucarecdn.com/4b4b992e-a8b2-43bf-b580-465bfd30467e/image.png)

SSO provider is successfully created:

![](https://ucarecdn.com/b3fc8b51-83a1-40f2-acb0-7fe9d6998962/image.png)

Don't forget to enable access for your users on the Google side

![](https://ucarecdn.com/462a7aa5-6b25-43d8-8367-3e6261f9ab80/image.png)

![](https://ucarecdn.com/643fe1b5-361d-43a9-b1a8-191042b04ffb/image.png)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://support.docstudio.com/admin-panel/account-settings/how-to-set-up-sso-with-google.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
