> ## Documentation Index
> Fetch the complete documentation index at: https://forest-chore-open-api.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Workspace SSO

> Configure SSO with Google Workspace

## Configuration

1. Log in to your Google account and navigate to the **Admin console**
2. Go to **Menu → Apps → Web and mobile apps**
3. Click **Add App → Add custom SAML app** and follow the wizard
4. In the **Service Provider Details** window, enter:

| Setting              | Value                                                                                                              |
| -------------------- | ------------------------------------------------------------------------------------------------------------------ |
| ACS URL              | `https://api.forestadmin.com/api/saml/callback`                                                                    |
| Entity ID            | Displayed in your Forest Organization settings                                                                     |
| Start URL (optional) | For [IdP-initiated login](/get-started/control/authentication/sso-providers/overview#idp-initiated-login-optional) |

5. Download or copy the IdP metadata and paste it into Forest (see [SSO configuration guide](/get-started/control/authentication/sso-providers/overview))

<Info>
  See the [Google documentation on custom SAML applications](https://support.google.com/a/answer/6087519) for more details.
</Info>

## Troubleshooting

* Double-check all endpoints and certificate expiration dates
* Ensure the `Name ID` (primary email) in your IdP matches the **email address used on Forest accounts**