SAML integration to Google Workspace SAML integration to Google Workspace

SAML integration to Google Workspace

SAML is an XML-based open-standard for transferring identity data between two parties. Using SAML we can integrate Blinq with Google Workspace in order to create a custom SAML Application.



Blinq only supports Identity Provider initiated SSO at the moment. We will be adding support for Service Provider initiated SSO in the near future which will enable your organisation to log into Blinq using SAML-based SSO.



Creating a SAML application in Google Workspace

  1. Navigate to and log in
  2. Hover over the left side of the screen to view the navigation bar, then click Apps > Web and mobile apps
  3. Click Add App and in the dropdown select Add custom SAML app
  4. Enter App name and Description
  5. Click Continue


Step 3


Step 4


You will see two options, we are using Option 2: Copy the SSO URL, entity ID, and certificate. You will need to give these details to Blinq so let's open up the Blinq Dashboard before proceeding.

  1. Navigate to in a new tab
  2. If you aren't logged in to Blinq you will need to do so
  3. Click on your workspace in the top left of the screen
  4. In the dropdown click Settings
  5. Under the Integrations page you should see SAML Configuration settings which contains two sections - the Identity Provider Settings and Service Provider Settings. Click on Identity Provider Settings - you should see three inputs where you can enter in those details from Google
  6. Navigate back to Google Workspace and copy each detail, pasting them into the corresponding input in Blinq
  7. Once you have pasted all the details into Blinq click Save
  8. Now click the Service Provider Settings section - you should see two pieces of information, the Service Provider Entity ID and the ACS URL. We need to give this information back to Google.
  9. Copy the Service Provider Entity ID and navigate back to Google Workspace
  10. Click Continue
  11. Google should now ask you for Entity ID and ACS URL - paste in those details from Blinq
  12. Select the Name ID Format dropdown and then select Email
  13. Click Continue
  14. We don't need to add any attribute mappings, you can leave the default settings and click Finish
Step 12


We now need to enable the Blinq app in Google Workspace.
  1. Click the User access section in your Blinq app on Google Workspace
  2. To turn on or off a service for everyone in your organization, click ON for everyone or OFF for everyone, and then click Save


Step 1


Step 2


Verify that the application in Google Workspace can login via SAML

  1. Make sure you are in your Blinq application in Google Workspace, and then click TEST SAML LOGIN
  2. A new tab should open that asks you to login via Google. If it doesn’t, use the information in the resulting SAML error messages to update your IdP and SP settings as needed, then retest SAML login.
  3. Login using an email address that matches your Google Domain, i.e. if your google domain was than you would have to login with an email that ended with
  4. After logging in if you see a JSON format data with your personal information, it means that you have set up SSO successfully.


Step 1