Single sign-on
Configure a SAML identity provider for single sign-on with Google Workspace, Salesforce and Microsoft 365.
Single sign-on (SSO) lets people sign in to multiple applications and websites with one set of credentials. A SAML identity provider (IdP) authenticates the user and the cloud application acts as the service provider (SP), so users sign in once and you manage one identity instead of many.
SAML supports both IdP-initiated and SP-initiated sign-in. See How SAML sign-in works for the difference.
Before you start#
Every guide in this section assumes:
- A SAML 2.0 identity provider with a public DNS name and a valid TLS certificate.
- Administrator access to the identity provider.
- Administrator access to the application you are federating.
- A verified custom domain in the application tenant.
Guides#
Sign-in flows
Understand IdP-initiated and SP-initiated single sign-on with a SAML identity provider.
Read guide →Google Workspace
Configure Google Workspace to trust your SAML identity provider (IdP), with IdP-initiated and SP-initiated sign-in.
Read guide →Salesforce
Configure Salesforce to trust your SAML identity provider (IdP), with IdP-initiated and SP-initiated sign-in.
Read guide →Microsoft 365
Federate a Microsoft 365 domain with your SAML identity provider so users sign in to Microsoft 365 with their directory credentials.
Read guide →