Configuring Vouched SSO with Google Workspace

Configure Google Workspace as your SAML 2.0 identity provider (IdP) for Vouched SSO.

This guide walks through configuring Google Workspace for Vouched SSO.

Prerequisites

Before you begin:

• Complete Steps 1–2 in the SSO / SAML Configuration guide.
• Copy your Vouched SP metadata values from the IdP Configuration section.
• Sign in to the Google Admin Console with permission to create apps and manage user access.

Configure Google Workspace for Vouched SSO

1. Create a custom SAML app

1. Log in to the Google Admin Console.
2. Navigate to Apps > Web and mobile apps.
3. Click Add app > Add custom SAML app.
4. Give the app a name, such as Vouched.
5. Click Continue.

2. Retrieve your Google Workspace metadata

On the Google Identity Provider details screen:

1. Click Download Metadata to save the XML file.
2. Paste its contents into the Metadata XML field in Vouched.
3. Click Save.

Note: Google Workspace does not provide a persistent metadata URL in the same way as Okta or Azure AD. If your signing certificate is rotated, you will need to re-download the metadata XML and re-upload it in Vouched. Consider setting a reminder to check for certificate renewals.

4. Click Continue.

3. Configure service provider details

On the Service provider details screen, enter the following values from your Vouched IdP Configuration section:

Click Continue.

4. Add attribute mappings

On the Attribute mapping screen, click Add mapping and add the following:

Click Finish.

5. Enable the app for users

1. Find the Vouched app in your Web and mobile apps list and click it.
2. Click User access.
3. Set the service status to ON for the appropriate organizational units or groups.
4. Click Save.

Need help?

Contact Vouched support with a description of the issue and the step where it occurs.