Google Workspace

This guide will show you how to integrate GoodAccess with Google Workspace SSO.
This feature is available in the Premium plan and higher.
Please note: Changing the login method to identity provider will permanently delete all Members you invited. Your team Members will be automatically added to GoodAccess upon their first login. Manually added Members will stay.
Remember to grant your Google users access permissions to GoodAccess. Users without them won't be able to log in.
You may set up Single Sign-On (SSO) in Control Panel > Settings > SSO & MFA > + Add Provider.

Step 1

  1. 2.
    Click on Add App and Add custom SAML app.
  2. 3.
    Name the app and upload a logo.
  3. 4.
    Copy the following to GoodAccess - (3) Identity Provider Links.
    • SSO URL - Sign in URL
    • Entity ID - Entity ID
    • Certificate - X509 signing certificate

Step 2

Click Continue and copy the details from GoodAccess - (2) Service Provider Links.
  • ACS URL - Assertion Consumer Service URL
  • Entity ID - Entity ID
  • State URL - Login URL
  • Name ID format - UNSPECIFIED
  • Name ID - Basic Information > Primary email

Step 3

Click Continue and add the following attributes:
  • (First line) Primary email -> email
  • (Second line) First name -> name

Step 4

Open the newly created App, click on "OFF for everyone", select the group of users who will have access to the application, allow access, and Save.

Step 5

Now switch back to GoodAccess and click Continue, then Continue in the next dialog, and finally Submit.
Optionally you may enable automatic user provisioning - SCIM.
Last modified 1mo ago