--- title: Configure Google Workspace SAML Single Sign-On (SSO) description: Set up basic single sign-on authentication with Google Apps without introducing a third party service such as Okta or OneLogin. --- [Skip to content](https://help.corporategift.com/how-to-set-up-saml-sso-with-google-apps#main-content) English Show submenu for translations [Contact us](https://help.corporategift.com/kb-tickets/new?hsLang=en) Open main navigation Close main navigation - English Show submenu for translations - [Contact us](https://help.corporategift.com/kb-tickets/new) CorporateGift.com Help Center - There are no suggestions because the search field is empty. 1. [Corporategift.com knowledge base](https://help.corporategift.com/?hsLang=en) 2. [Integrations](https://help.corporategift.com/integrations?hsLang=en) 3. [SSO](https://help.corporategift.com/integrations?hsLang=en#sso) # Configure Google Workspace SAML Single Sign-On (SSO) ## This guide explains how to configure Google Workspace as a SAML Identity Provider for CorporateGift using the new self-service setup. **Setting up your Corporategift.com SSO account?**  Before You Begin - Super Admin access to CorporateGift - Google Workspace Administrator access - A verified Google Workspace domain ### **Step 1 – Create the Google SSO Integration in CorporateGift**       Navigate to My Integrations → SSO.       Locate Google Workspace SSO and click Add. ![Screenshot 2026-08-23 at 16.29.37](https://help.corporategift.com/hs-fs/hubfs/Screenshot%202026-08-23%20at%2016.29.37.png?width=670&height=316&name=Screenshot%202026-08-23%20at%2016.29.37.png)  Figure: *Step 1 – Create the Google SSO Integration in CorporateGift* ### **Step 2 – Configure Authentication** Choose Login Only or Just-in-Time (JIT) user provisioning. ![Screenshot 2026-08-23 at 16.36.04](https://help.corporategift.com/hs-fs/hubfs/Screenshot%202026-08-23%20at%2016.36.04.png?width=517&height=653&name=Screenshot%202026-08-23%20at%2016.36.04.png) *Figure: Step 2 – Configure Authentication* ### **Step 3 – Enter Your Company Name** Enter a lowercase company name (no spaces). Copy the generated ACS URL and Audience URI into Google Workspace. ![Screenshot 2026-08-23 at 16.55.36](https://help.corporategift.com/hs-fs/hubfs/Screenshot%202026-08-23%20at%2016.55.36.png?width=456&height=354&name=Screenshot%202026-08-23%20at%2016.55.36.png) ### **Step 4 – Configure the SAML App in Google Worksapce** ### Where to find SAML Apps in Google: As an administrator on your Google account, go to the[admin portal](https://admin.google.com/) and click through to **Apps \> Web and mobile apps** **![Screenshot at Aug 25 11-42-47](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2011-42-47.png?width=253&height=340&name=Screenshot%20at%20Aug%2025%2011-42-47.png)** Click **"Add App-\> Add Custom SAML app"** ![Screenshot at Aug 25 11-45-01](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2011-45-01.png?width=670&height=264&name=Screenshot%20at%20Aug%2025%2011-45-01.png)   In the app details, name it "Corporategift" and add our logo (you can take it from here, right click and Save as): ![cg\_logo-1](https://help.corporategift.com/hs-fs/hubfs/cg_logo-1.jpeg?width=225&height=224&name=cg_logo-1.jpeg)   ![Screenshot at Aug 25 11-52-15](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2011-52-15.png?width=670&height=328&name=Screenshot%20at%20Aug%2025%2011-52-15.png) Click **Continue.**   On the next page, click **Download metadata**. ![Screenshot at Aug 25 11-54-36](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2011-54-36.png?width=670&height=362&name=Screenshot%20at%20Aug%2025%2011-54-36.png) In the **Service provider details** step, add the following: ACS URL: **Paste the ACS URL copied in step 3**   (notice the structure should be like this: https://api.corporategift.com/api/sso/\[**your Company name with no spaces and lower case**\]/acs) Entity ID:  **Paste the Entity ID copied in step 3**   (notice the structure should be like this: https://api.corporategift.com/api/sso/\[**your Company name with no spaces and lower case**\]/metadata) Example: ![Screenshot at Aug 25 12-04-05](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2012-04-05.png?width=670&height=388&name=Screenshot%20at%20Aug%2025%2012-04-05.png)   Next, add mapping (optional). This will help us identify users.   Please add first name (firstname) and last name (lastname) as shown in the screenshot below: ![Screenshot at Aug 25 12-07-04](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2012-07-04.png?width=670&height=307&name=Screenshot%20at%20Aug%2025%2012-07-04.png) Click **Finish**. ### **Step 5 – Complete the Configuration** Open the **metadata** downloaded in step 4. Copy and Paste the Identity Provider Issuer, Single Sign-On URL and X.509 Certificate from Google Workspace into CorporateGift. ![Screenshot 2026-08-23 at 17.01.25](https://help.corporategift.com/hs-fs/hubfs/Screenshot%202026-08-23%20at%2017.01.25.png?width=556&height=637&name=Screenshot%202026-08-23%20at%2017.01.25.png) click continue ### **Step 6 – Configure Automatic User Provisioning** Choose whether all new users receive the same permissions or are configured by department.![Screenshot 2026-08-23 at 17.20.45](https://help.corporategift.com/hs-fs/hubfs/Screenshot%202026-08-23%20at%2017.20.45.png?width=521&height=312&name=Screenshot%202026-08-23%20at%2017.20.45.png) ##### **Option 1 – Same Permissions for All Users** Choose: **Set same permissions for all Google new users** Every newly created user will receive the same configuration Configure: - User Role - Tags - Categories - Campaign access - Budget Entities - Inventory Items - Approver - Spend Limits Every new user created through Google will receive these settings. ![Picture12](https://help.corporategift.com/hs-fs/hubfs/Picture12.png?width=514&height=951&name=Picture12.png) *Figure: Step 6 – Configure Automatic User Provisioning* ##### **Option 2 – Permissions Based on Department** Choose: **Set permissions based on department** This option allows different departments to receive different permissions automatically. ### Map Departments For each department: 1. Enter the department name exactly as it appears in Google. 2. Select the CorporateGift Tag that should be assigned. 3. Click **Add**. Example: | Azure Department | CorporateGift Tag | | --- | --- | | Sales | Sales | | Marketing | Marketing | | HR | Human Resources | **Important** Department names must exactly match the values sent by Google. Map Google Workspace department values to CorporateGift tags and configure permissions. ![Picture13](https://help.corporategift.com/hs-fs/hubfs/Picture13.png?width=545&height=281&name=Picture13.png) ### **Configure Permissions** For every department mapping, configure: - User Role - Tags - Categories - Campaign Access - Budget Entities - Inventory - Approver - Spend Limits Each department can have its own permission set. --- ### **You're Done** You should see the green "Installed" label ![Screenshot 2026-08-23 at 16.27.47](https://help.corporategift.com/hs-fs/hubfs/Screenshot%202026-08-23%20at%2016.27.47.png?width=507&height=458&name=Screenshot%202026-08-23%20at%2016.27.47.png) Once you confirmed the SSO has been properly set up from the corporategift.com side, please test the app by clicking **Test SAML login**.  ![Screenshot at Aug 25 12-13-53](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2012-13-53.png?width=670&height=294&name=Screenshot%20at%20Aug%2025%2012-13-53.png) If its working properly, please change app access to be *visible to all* by clicking on the expand arrow here: ![Screenshot at Aug 25 12-11-53](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2012-11-53.png?width=670&height=252&name=Screenshot%20at%20Aug%2025%2012-11-53.png) Change access to *On to everyone* and save ![Screenshot at Aug 25 12-15-33](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2012-15-33.png?width=670&height=178&name=Screenshot%20at%20Aug%2025%2012-15-33.png)   Now every user that has access to your CG Elite account can log in from their Google account by clicking on the Corporategift.com app icon :   ![Screenshot at Aug 25 12-18-43](https://help.corporategift.com/hs-fs/hubfs/Screenshot%20at%20Aug%2025%2012-18-43.png?width=670&height=1096&name=Screenshot%20at%20Aug%2025%2012-18-43.png) - [FAQs](https://help.corporategift.com/faqs?hsLang=en#main-content) - [Company Values](https://help.corporategift.com/faqs?hsLang=en#company-values) - [Getting started](https://help.corporategift.com/getting-started?hsLang=en) - [General](https://help.corporategift.com/general?hsLang=en#main-content) - [FAQ](https://help.corporategift.com/general?hsLang=en#faq) - [Integrations](https://help.corporategift.com/integrations?hsLang=en#main-content) - [SSO](https://help.corporategift.com/integrations?hsLang=en#sso) - [CRM](https://help.corporategift.com/integrations?hsLang=en#crm) - [Vendors](https://help.corporategift.com/integrations?hsLang=en#vendors) - [HRIS](https://help.corporategift.com/integrations?hsLang=en#hris) [![CorporateGift.com Logo](https://help.corporategift.com/hs-fs/hubfs/Group%20139-2.png?width=200&height=19&name=Group%20139-2.png "CorporateGift.com Logo")](https://corporategift.com) [CorporateGift.com](http://corporategift.com) Help Center Copyright © 2026, CorporateGift.com