> ## Documentation Index
> Fetch the complete documentation index at: https://dub.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring SAML SSO with Google Workspace

> For Dub Enterprise users, you can securely manage your team's access to Dub using Google Workspace SAML SSO.

<Tip>
  This feature is only available on [Dub Enterprise](https://dub.co/enterprise).
</Tip>

For Dub Enterprise users, you can securely manage your team's access to Dub using [Google Workspace SAML SSO](https://cloud.google.com/architecture/identity/single-sign-on).

## Step 1: Create SAML Integration

In your [Google Admin](https://admin.google.com/) dashboard, click on **Apps** in the sidebar and select **Web and mobile apps** from the list.

<Image alt="Apps > Web and mobile apps on the Google Admin Dashboard" src="https://assets.dub.co/help/google-saml-apps.png" />

If you don't already have an existing SAML application, click on **Add app** and select **Add custom SAML app** from the dropdown menu.

<Frame>
  <img src="https://assets.dub.co/help/google-saml-create-app.png" alt="Create App on the Google Admin Dashboard" />
</Frame>

Enter the **App name** for your application, and click **Continue**.

<Frame>
  <img src="https://assets.dub.co/help/google-saml-app-name.png" alt="Configuring SAML app name on the Google Admin Dashboard" />
</Frame>

In the next screen, click **Download Metadata** to download the metadata XML file and click **Continue**. You'll need this file in Step 3.

<Frame>
  <img src="https://assets.dub.co/help/google-saml-download.png" alt="Downloading SAML metadata on the Google Admin Dashboard" />
</Frame>

Copy the following values and paste them under **Service provider details**:

```text title="ACS URL" theme={null}
https://api.dub.co/auth/saml/callback
```

```text title="Entity ID" theme={null}
https://saml.dub.co
```

<Frame>
  <img src="https://assets.dub.co/help/google-saml-provider.png" alt="Service provider details on the Google Admin Dashboard" />
</Frame>

Click **Next** to proceed to the next step.

## Step 2: Configure Attribute Mapping

On the next screen, under the **Attributes** section, click **Add Mapping** and add the following attribute mappings:

| Google Directory attributes | App attributes |
| --------------------------- | -------------- |
| `Primary email`             | `email`        |
| `First name`                | `firstName`    |
| `Last name`                 | `lastName`     |

<Frame>
  <img src="https://assets.dub.co/help/google-saml-attributes.png" alt="Attribute Mapping on the Google Admin Dashboard" />
</Frame>

Once that's done, click **Finish**.

On the next screen, click **User access** to configure the application to allow users to log in.

<Frame>
  <img src="https://assets.dub.co/help/google-saml-users.png" alt="User access on the Google Admin Dashboard" />
</Frame>

Check the **ON for everyone** checkbox and click **Save**.

<Frame>
  <img src="https://assets.dub.co/help/google-saml-save.png" alt="Turn on access for everyone on the Google Admin Dashboard" />
</Frame>

This will allow users in your Google Workspace to automatically sign in to Dub with Google SAML SSO.

You can now return to the Dub dashboard to complete the SAML SSO configuration.

## Step 3: Configure SAML SSO on Dub

In your workspace settings, click on **Security** in the **Workspace** group.

<Frame>
  <img src="https://assets.dub.co/cms/saml-directory-sync-2.png" alt="Directory Sync section on the Dub Dashboard" />
</Frame>

Under the **SAML Single Sign-On** section, click on **Configure**. This will open up the SAML SSO modal:

1. Select **Google** as the SAML provider.
2. Upload the metadata XML file you downloaded in Step 1.
3. Click **Save changes**.

<Frame>
  <img src="https://assets.dub.co/help/google-saml-modal.png" alt="Google SAML SSO Modal" />
</Frame>

That's it! You're all set – your team can now sign in to Dub using Google SAML SSO.