> ## Documentation Index
> Fetch the complete documentation index at: https://www.getmaxim.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up Single Sign-On (SSO) with Google

> Step-by-step guide to configure Google Workspace SAML 2.0 Single Sign-On (SSO) for Maxim.

Enable enterprise-grade Single Sign-On with Google Workspace (SAML 2.0) to centralize authentication, improve security, and streamline access to Maxim.

## Overview

This guide walks you through configuring Google as the Identity Provider (IdP) for Maxim using SAML 2.0.

You will:

* Create a custom SAML app in Google Admin Console
* Download IdP metadata
* Configure service provider details (ACS URL, Entity ID)
* Map user attributes
* Enable user access
* Upload metadata to Maxim and test SSO

## Prerequisites

* Google Workspace Super Admin access
* Maxim AI admin access
* SAML-based Single Sign-On (SSO) enabled for your plan. Check [plans](https://www.getmaxim.ai/pricing) for more details.

## Step-by-Step Setup

<Steps>
  <Step title="Create a custom SAML app in Google">
    * In Google Admin Console, go to Apps → Web and mobile apps
    * Click "Add app" → "Add custom SAML app"
          <img src="https://mintcdn.com/maximai/nkzek67HDXeUEH1_/images/docs/settings/sso/google/1_google_admin_apps.png?fit=max&auto=format&n=nkzek67HDXeUEH1_&q=85&s=429ba20dc2f9d3dd163dfe27c491dcfb" alt="Create custom SAML app" width="3184" height="1704" data-path="images/docs/settings/sso/google/1_google_admin_apps.png" />
  </Step>

  <Step title="Application details">
    Enter an app name (e.g., "Maxim AI"), optionally upload an icon and click "Continue"

    <img src="https://mintcdn.com/maximai/nkzek67HDXeUEH1_/images/docs/settings/sso/google/2_add_custom_saml_app.png?fit=max&auto=format&n=nkzek67HDXeUEH1_&q=85&s=61d51beb40fb4e1ac0b3e94ed3b8d0b8" alt="Enter application details" width="2564" height="1690" data-path="images/docs/settings/sso/google/2_add_custom_saml_app.png" />
  </Step>

  <Step title="Download IdP metadata">
    On the Google IdP details screen:

    * Click "DOWNLOAD METADATA" to get the IdP metadata XML and click "Continue"
          <img src="https://mintcdn.com/maximai/nkzek67HDXeUEH1_/images/docs/settings/sso/google/3_download_metadata_xml.png?fit=max&auto=format&n=nkzek67HDXeUEH1_&q=85&s=e67a652286b4b2adf47202f81cbaa37c" alt="Download IdP metadata" width="2132" height="1704" data-path="images/docs/settings/sso/google/3_download_metadata_xml.png" />
  </Step>

  <Step title="Configure service provider details">
    * Single sign-on URL (ACS URL): `https://app.getmaxim.ai/api/oauth/saml`
    * Audience URI (Entity ID): `www.getmaxim.ai`
          <img src="https://mintcdn.com/maximai/nkzek67HDXeUEH1_/images/docs/settings/sso/google/4_service_provider_details.png?fit=max&auto=format&n=nkzek67HDXeUEH1_&q=85&s=95c31af1b6db9d9eb2b46b5ce9715bab" alt="Configure service provider details" width="2492" height="1411" data-path="images/docs/settings/sso/google/4_service_provider_details.png" />
  </Step>

  <Step title="Attribute mapping">
    Under the Attributes section, add the following mappings:

    * email → Primary email
    * firstName → First name
    * lastName → Last name

    Then click "Finish" to save the configuration.

    <img src="https://mintcdn.com/maximai/nkzek67HDXeUEH1_/images/docs/settings/sso/google/5_attribute_mapping.png?fit=max&auto=format&n=nkzek67HDXeUEH1_&q=85&s=443a200abe2d5107568d96a99c592726" alt="Attribute mapping" width="2478" height="1413" data-path="images/docs/settings/sso/google/5_attribute_mapping.png" />
  </Step>

  <Step title="Enable user access">
    From the app’s "User access" section:

    * Turn the app ON for everyone, or
    * Turn ON for selected Organizational Units (OUs) / Groups as needed
  </Step>

  <Step title="Complete the setup in Maxim">
    * Log in to Maxim AI, go to Settings → Single sign-on, and click "Add identity provider"
    * Enter your email address domain as the tenant identifier
    * Enter "Google" as the name for the identity provider
    * Paste the IdP metadata XML and click "Add provider"
          <img src="https://mintcdn.com/maximai/nkzek67HDXeUEH1_/images/docs/settings/sso/google/6_add_xml_in_maxim.png?fit=max&auto=format&n=nkzek67HDXeUEH1_&q=85&s=a1a512e25e6bc94e56b3df1655a681f9" alt="Add identity provider" width="1230" height="1286" data-path="images/docs/settings/sso/google/6_add_xml_in_maxim.png" />
  </Step>
</Steps>

## Testing Single Sign-On (SSO)

Once you have completed the setup, you can test SSO by logging out of Maxim AI and clicking on the Sign in with SSO button on the login page.
You should be redirected to the Google login page. After logging in, you should be redirected back to Maxim AI.