All Collections
Settings
Integrations
Enable SSO Using Google Workspace
Enable SSO Using Google Workspace

Set up single sign-on using Google Workspace

Updated over a week ago

Before you begin your setup, open Google Workspace in one tab and Productive in the other as you'll be copying information from one page to the other.

To set up SSO in Google's Google Workspace, go to your Google Workspace account, navigate to Apps - Overview, and select Web and mobile apps

Or, navigate to Apps - Web and mobile apps and select Add app - Add custom SAML app

1. App details

Give your app a name, description, and photo. (We recommend Productive SSO so you can find it more easily)

2. Google Identity Provider Details (IdP)

You'll see this screen, keep it open as you'll need to copy and paste items back and forth:

Now go to Productive and in Settings select Single Sign-on:

Go back to Google Workspace and copy the SSO URL field:

... and paste it to the Identity Provider Single Sign-On URL:

Next, click on the switch to change it to the Metadata:

Go back to Google Workspace and under Option 1, Download and then copy the contents of that file.

Paste the content to Productive (again make sure that the field is named just Metadata instead of Metadata URL)

Next, it is time to copy the Single Sign-On URL:

3. Service Provider details


ACS URL and Entity ID:
In Settings - Single sign-on, the ACS URL is located under the Single sign-on URL, and the Entity ID is located under the Audience URI field:

Tick the Signed response option and make sure to select EMAIL under the Name ID field:

Select Continue to proceed

4. Attribute Mapping


Define the attributes using the following rules:

Select 'First name' under the Basic Information from the first dropdown and type in first_name as the corresponding App attribute.

Select 'Last name' under the Basic Information from the first dropdown and type in last_name as the corresponding App attribute.

Hit finish, go back to Productive, and select Enable SSO:

Now, go back to Google Workspace and find Productive SSO in the menu next to your name. There you'll have to select the option ON for everyone:

When you add a new person to your organization via Google Workspace, they will be able to access Productive directly from the Google Apps menu, along with the rest of the team.

Did this answer your question?