> ## Documentation Index
> Fetch the complete documentation index at: https://docs.paradime.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Google SAML SSO

> Google SAML SSO: Configure SAML SSO with Google for Paradime and dbt™ projects. Simplify user login and access management.

### Introduction

Google SAML provides secure identity management and single sign-on to applications that you can add to your Google Workspace account. From Google Workspace, you and your users can log in and then access applications such as Paradime without having to log in to each application.

Organizations can use Google SAML 2.0 to connect Paradime to their Google Workspace instance. This page describes how to configure the Google SAML connection for Paradime.

### Creating a Google SAML Application

1. To connect your Google Workspace as an identity provider, you must create a SAML application. In your Google Admin Console, navigate to the Apps section.\
   Go to **Apps > Web and mobile apps**, and select **Add App > Add custom SAML app**.

<Frame caption="Apps Home">
  <img src="https://mintcdn.com/paradime-docs/GV4HPhgD7sIFolVh/images/gsamlsso-apps-homepage.png?fit=max&auto=format&n=GV4HPhgD7sIFolVh&q=85&s=dcb7c79e65589ad951ed1e1e37660f2d" alt="Apps Home" width="1807" height="663" data-path="images/gsamlsso-apps-homepage.png" />
</Frame>

2. Enter your **App integration name** as Paradime.\
   Add the Paradime Logo for the Application. You can download the Paradime logo here [Paradime Logo](https://paradime.notion.site/Icon-purple-90c6f9527e1e4195b95a6f4595e6f15c).

<Frame caption="App Details">
  <img src="https://mintcdn.com/paradime-docs/GV4HPhgD7sIFolVh/images/gsamlsso-app-details.png?fit=max&auto=format&n=GV4HPhgD7sIFolVh&q=85&s=768b58b55654dd67b56da3e163171d6a" alt="App Details" width="1807" height="775" data-path="images/gsamlsso-app-details.png" />
</Frame>

Select **Continue**.
3\.  In the **Google Identity Provider details** page, note the following information:

* **SSO URL**
* **Entity ID**
* **Certificate** (download this file)

You will need to share these details with Paradime Support. Select **Continue**.

<Frame caption="IdP Details">
  <img src="https://mintcdn.com/paradime-docs/GV4HPhgD7sIFolVh/images/gsamlsso-note-idp-details.png?fit=max&auto=format&n=GV4HPhgD7sIFolVh&q=85&s=25e8a329068f31c4457fb6880150f36d" alt="IdP Details" width="1807" height="892" data-path="images/gsamlsso-note-idp-details.png" />
</Frame>

4. In the **Service Provider Details** section, enter the following details:

   * **ACS URL**: Enter the URL below based on the region where your Paradime account is hosted

| Region  | ACS URL                                              |
| ------- | ---------------------------------------------------- |
| EU 🇪🇺 | `https://account.paradime.io/login/saml/callback`    |
| US 🇺🇸 | `https://account.us.paradime.io/login/saml/callback` |

* **Entity ID**: `urn:account:paradime-io:samlp-<organization-name>` (Get the `<organization-name>` from Paradime Support)
* **Name ID format**: Select **EMAIL**

Select **Continue**.

<Frame>
  <img src="https://mintcdn.com/paradime-docs/_V48tdxcy1g_Y-dv/images/image-242.png?fit=max&auto=format&n=_V48tdxcy1g_Y-dv&q=85&s=29dda4fa37b0e1a7b9223e0060dc7fe2" alt="" width="3446" height="1798" data-path="images/image-242.png" />
</Frame>

5. In the **Attribute Mapping** section, configure the required attribute mappings.\
   Select **Finish**.

| Google Directory Attributes | App Attributes |
| --------------------------- | -------------- |
| First name                  | `given_name`   |
| Last name                   | `family_name`  |
| Primary email               | `email`        |

<Frame caption="Attribute Mapping">
  <img src="https://mintcdn.com/paradime-docs/GV4HPhgD7sIFolVh/images/gsamlsso-attribute-mapping.png?fit=max&auto=format&n=GV4HPhgD7sIFolVh&q=85&s=0f54071b204ba95199e67f58c241828f" alt="Attribute Mapping" width="1807" height="892" data-path="images/gsamlsso-attribute-mapping.png" />
</Frame>

6. After creating the application, enable it for users in your organization.\
   Click on **User Access** and update the **Service Status** to **ON** for all users or relevant groups within your organization.

<Frame caption="User Access">
  <img src="https://mintcdn.com/paradime-docs/GV4HPhgD7sIFolVh/images/gsamlsso-user-access-2.png?fit=max&auto=format&n=GV4HPhgD7sIFolVh&q=85&s=8ac26ec853d7043bb068241c5b2152d2" alt="User Access" width="1807" height="892" data-path="images/gsamlsso-user-access-2.png" />
</Frame>

<Danger>
  &#x20;Make sure you add the user groups who need access to Paradime in the **User Access** section and verify the Service Status is set to ON.
</Danger>

### Configuring Paradime to enable Google SAML SSO

Once the Google SAML Application is configured, reach out to the Paradime team at [support@paradime.io](mailto:support@paradime.io) and share the following information via a password manager like 1Password, Dashlane and similar:

* **Entity ID** (from step 4 in the previous section)
* **IdP metadata:** (In your Google Application, in the left panel click on "Download Metadata" and from option 1: download the metadata xml file.
* **Certificate file** (In your Google Application, in the left panel click on "Download Metadata" and from option 2: download the certificate file.

Paradime team will then create the SSO client and enable SSO on your company name. Wait for approximately 30 minutes for Google to apply the changes.

Once confirmed, during login, users in your company will see a **Continue with Google SAML** option.

<Check>
  If you already have an existing Social login setup, then using the Google SAML option, Paradime will automatically link your accounts and you can then use Google SAML SSO for all future logins.&#x20;
</Check>


## Related topics

- [Single Sign On (SSO)](/products/single-sign-on/index.md)
- [Google SSO](/products/single-sign-on/google-sso.md)
- [Google Workspace SSO](/products/single-sign-on/google-workspace-sso.md)
- [okta-saml2.0](/products/single-sign-on/okta-sso/okta-saml2.0.md)
- [Security model](/resources/other-important-stuff/security-model.md)