> ## Documentation Index
> Fetch the complete documentation index at: https://learn.biq.li/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring SAML SSO with Google Workspace

> For Biqli Enterprise users, securely manage your team's access to Biqli using Google Workspace SAML SSO.

<Warning>
  **Enterprise Plan Feature**: SAML Single Sign-On is available exclusively for workspaces on the **Enterprise plan**.
</Warning>

For Biqli Enterprise users, you can securely manage your team's access to Biqli using Google Workspace SAML SSO.

## Step 1: Create SAML Integration

In your Google Admin dashboard, navigate to **Apps** in the left sidebar and select **Web and mobile apps** from the list.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/biqlillc-cc349ea4/images/google-saml/google-saml-app.png" alt="Navigate to Web and mobile apps" />
</Frame>

Click **Add app** and select **Add custom SAML app** from the dropdown menu.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/biqlillc-cc349ea4/images/google-saml/google-saml-add-app.png" alt="Add Custom SAML App" />
</Frame>

Enter the **App name** (e.g. **Biqli**) and click **Continue**.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/biqlillc-cc349ea4/images/google-saml/google-saml-app-name.png" alt="General Settings - App Name" />
</Frame>

In the next screen, click **Download Metadata** to download the metadata XML file, then click **Continue**. You will need this file in Step 3.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/biqlillc-cc349ea4/images/google-saml/google-saml-metadata.png" alt="Download Metadata XML" />
</Frame>

Under **Service provider details**, copy the following values and paste them into their respective fields:

```text ACS URL theme={null}
https://biq.li/saml/acs
```

```text Entity ID theme={null}
https://biq.li/workspaces/{WORKSPACE_SLUG}
```

<Note>
  Please ensure you replace `{WORKSPACE_SLUG}` with the slug of the specific workspace in which you are activating Google Workspace SAML SSO.
</Note>

Under **Name ID**, set the **Name ID format** to `Email` and the **Name ID** mapping to `Basic Information > Primary email`.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/biqlillc-cc349ea4/images/google-saml/google-saml-sp-details.png" alt="Service Provider Details" />
</Frame>

Click **Continue** to proceed to the next step.

## Step 2: Configure Attribute Mapping

On the next screen under the **Attributes** section, click **Add Mapping** and configure the following attribute mappings:

| Google Directory Attribute | App Attribute |
| :------------------------- | :------------ |
| **Primary email**          | `email`       |
| **First name**             | `firstName`   |
| **Last name**              | `lastName`    |
| **Primary email**          | `name`        |

You can copy the App Attributes directly from below:

```text email theme={null}
email
```

```text firstName theme={null}
firstName
```

```text lastName theme={null}
lastName
```

```text name theme={null}
name
```

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/biqlillc-cc349ea4/images/google-saml/google-saml-attributes.png" alt="Configure Attribute Mapping" />
</Frame>

Click **Finish** to complete the SAML app setup.

On the application overview screen, select **User access** to configure login permissions.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/biqlillc-cc349ea4/images/google-saml/google-saml-user-access.png" alt="Select User Access Settings" />
</Frame>

Select **ON for everyone** (or assign to specific groups) and click **Save**.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/biqlillc-cc349ea4/images/google-saml/google-saml-user-access2.png" alt="Enable ON for everyone" />
</Frame>

This enables your Google Workspace users to seamlessly sign in to Biqli using Google SAML SSO. Next, return to the Biqli dashboard to finish configuring the SAML SSO settings.

## Step 3: Configure Biqli SAML SSO Settings

Navigate to your workspace **Security Settings** in Biqli. Under the **SAML Single Sign-On** section, click **Configure SAML Single Sign-On**.

<Frame>
  <img src="https://mintcdn.com/biqlillc-cc349ea4/6u-Qjlh2ycaDp84P/images/okta-saml/biqli-security-saml.png?fit=max&auto=format&n=6u-Qjlh2ycaDp84P&q=85&s=ed454148115ce30c62564d686f9d9faa" alt="Biqli Security Settings" width="3840" height="2160" data-path="images/okta-saml/biqli-security-saml.png" />
</Frame>

In the configuration modal:

1. **Select Identity Provider**: Choose **Google** as your SAML provider.
2. **Upload Metadata**: Upload the Metadata XML file you downloaded in Step 1.
3. **Test Connection**: Verify the configuration.
4. **Activate SAML**: Toggle on SAML authentication for your workspace.
5. **Save Changes**: Click **Save changes** to complete the setup on Biqli.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/biqlillc-cc349ea4/images/google-saml/google-saml-biqli-setup2.png" alt="Biqli SAML Configuration modal" />
</Frame>

Once saved, your Google Workspace integration is ready and team members can log in using Google SSO.