SAML2.0: How to Connect to Google Workspace

STEP 1: Create SAML App in Google Admin#

Login to your Google Workspace administrator account and navigate to Apps → SAML Apps. Create a new App.

Enable SSO for SAML Application:

1. Choose “Setup My Own Custom App” at the bottom of the dialog

2. Google IdP Information: The second step of the dialog will display the Identity Provider info

STEP 2: Configure the SAML Connection in YAROOMS#

• Inside a new browser tab, login as an administrator to your YAROOMS account.
• Navigate to Settings → Integrations → SAML 2.0 and start the integration process. In the “Connection” tab, fill in the form as follows:
  • Identity Provider: Type Google SAML
  • Issuer URL: Copy and paste the value for Entity ID from Google IdP Information.
  • SAML Endpoint: Copy and paste the value for SSO Url from Google IdP Information
  • X.509 Certificate: Download the certificate from the Google IdP Information dialog and copy its contents
  • Name ID Format: choose emailAddress as value.
  • Attributes Mapping:
    • Map First Name to FirstName
    • Map Last Name to LastName

Use Add field to the list under Attributes mapping to add these fields. Enter FirstName and LastName in IDP field name to match the Google attribute mapping configured in step 4. The screenshot below shows the shared interface with example values; capitalization must match your Google configuration.

• Click Save and open User options.
• Under Location, select Static and choose the default location for new users. Under Team, select Static for Group/Team mapping and choose their default team. Dynamic mapping reads these values from a directory property instead.

Enable Update properties at each login only if the user’s location and team should be updated to match directory values whenever they sign in.

• Save User options and navigate to “Application details” tab.

Copy values from your own YAROOMS account, not the example domain shown in the screenshot.

STEP 3: Fill Service Provider Details in the Google App#

• Back to the Google App, fill in the fields as follows:
  • ACS URL: Paste the value from the ACS (Consumer) URL field from YAROOMS Application details.
  • Entity ID: Copy the Entity ID value from YAROOMS Application details.
  • Name ID: Basic Information, Primary Email
  • Name ID Format: EMAIL
• Save and move to “Attribute Mapping”.

STEP 4: Map Attributes in the Google App#

Define the next value set for mapped attributes:

• FirstName - Basic Information - First Name
• LastName - Basic Information - Last Name

• Save the Application.
• In Google Admin, navigate to Apps → SAML Apps.
• Turn the App on and configure the user settings accordingly.

STEP 5: Fix the SAML Endpoint in YAROOMS Connection Settings#

• To get the valid SAML Endpoint for the newly created Google SAML App, go to Google Admin. Open the Google App menu and look for the YAROOMS SAML application previously created.

• Right click (or Control-click on Mac) and select ‘Copy Link Address’.
• Go to YAROOMS Connection tab and paste the link in the SAML Endpoint field.
• It should look similar to: https://accounts.google.com/o/saml2/initsso?idpid=C012abcde&spid=123456789012&forceauthn=false
• Save Connection settings.
• Review the integration state on Status and complete setup before testing sign-in with an assigned Google Workspace user.

This tutorial does not cover user provisioning and assignment in Google Workspace. It assumes you are already familiar with configuring Google Workspace settings specific to your organization’s user setup.