SAML configuration for Google Workspace

Supported in:

This document explains how to configure Google Workspace for authentication and how to configure the Google Security Operations SOAR platform to support this.

Configure Google Workspace for single sign-on (SSO)

  1. Navigate to the Google Admin Portal.
  2. Select Apps.
    3. samlgw1
  3. Click on Web and mobile apps. Select Add custom SAML app from the drop-down Add App menu.
    4. samlgw2
  4. Enter the New Name of App and upload an App icon. Then click Continue.
    5. samlgw3
  5. In the Google IdP Information screen, click Next.
    6. samlgw4
  6. In the Service Provider Details screen, enter the following information:
    • ACS URL: https://{your_siemplify_server_IP_address}/Saml2/Acs
    • Entity ID: https://{your_siemplify_server_IP_address}/Saml2
    • Click Next.
  7. In the Attribute Mapping screen, click Add New Mapping.
  8. Set the Primary email to email.
    9. samlgw7
  9. Make sure that the Service Status Button is on.
    10. samlgw8


    The following is an example of SAML functioning properly:
    samlgw9

Configure Google Workspace in Google SecOps SOAR

  1. Navigate to Settings > Advanced > External Authentication.
  2. Create a new custom SAML provider.
  3. In the Provider Type menu, select G Suite.
  4. In the Provider Name field, enter any name you want. For example, mycompany_workspace.
  5. Return to the Google Workspace app that you created and select Download Metadata.
  6. In the dialog that opens, click Download Metadata and save the information.
  7. In the Google SecOps SOAR platform, in the IdP Metadata field, click Upload to upload the metadata you just downloaded.
  8. Return to the Google Workspace app, expand Service provider details, and click Manage Certificates.
  9. In the SAML Certificates dialog that appears, under the Google Identity Provider Details heading, locate the Entity ID field and copy its contents. Make sure not to mistakenly copy over contents from the Entity ID field that is located in the main Service provider details page.
  10. In the Google SecOps SOAR platform, paste the contents into the Identifier field.
  11. Return to the Google Workspace app, and expand Service Provider details. Locate the ACS URL field and copy its contents.
  12. In the Google SecOps SOAR platform, paste the contents into the ACS URL field. Make sure to remove the trailing "/Acs" at the end of the URL.
  13. Click Save.
For more information, see External Authentication.

Need more help? Get answers from Community members and Google SecOps professionals.