{
  "schema_version": 2,
  "id": "operate/rc/security/access-control/saml-sso/saml-integration-google",
  "title": "Google Workspace SAML integration guide",
  "url": "https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso/saml-integration-google/",
  "summary": "This integration guide shows how to configure Google Workspace as a SAML single sign on provider for your Redis Cloud account.",
  "tags": [
    "docs",
    "operate",
    "rc"
  ],
  "last_updated": "2026-10-01T14:41:30+01:00",
  "page_type": "content",
  "content_hash": "e5f6f2419be85a6f887e1d64bf4259af0412c77b742cf9aa6993c1205f1cc3e8",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "This guide shows how to configure [Google Workspace](https://workspace.google.com/) as a SAML single sign-on identity provider (IdP) for your Redis Cloud account.\n\nTo learn more about Redis Cloud support for SAML, see [SAML single sign-on](https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso).\n\nBefore completing this guide, you must [verify ownership of any domains](https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso#verify-domain) you want to associate with your SAML setup."
    },
    {
      "id": "step-1-set-up-your-identity-provider-idp",
      "title": "Step 1: Set up your identity provider (IdP)",
      "role": "content",
      "text": ""
    },
    {
      "id": "create-the-google-workspace-saml-application",
      "title": "Create the Google Workspace SAML application",
      "role": "content",
      "text": "1. Sign in to your [Google Workspace admin account](https://admin.google.com/).\n\n1. From the main menu, select **Apps** then **Web and mobile apps**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_0.png)\n\n1. Once in Web and mobile apps, select **Add custom SAML app** from the dropdown list.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_1.png)\n\n1. To begin, change the **App name** and **Description** to **Redis Cloud**. You can also choose an **App icon** for the application. We suggest you upload a Redis icon. Once complete, select **Continue**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_2.png)\n\n1. In the next screen, you will find all of the information needed to configure SAML in Redis Cloud. Select the **copy** button for the following information sections:\n\n   * SSO URL\n   * Entity ID\n   * Certificate\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_3.png)\n\nOnce complete, select **Continue**."
    },
    {
      "id": "step-2-configure-saml-support-in-redis-cloud",
      "title": "Step 2: Configure SAML support in Redis Cloud",
      "role": "content",
      "text": "Now that you have your Google Workspace IdP server information, configure support for SAML in Redis Cloud."
    },
    {
      "id": "sign-in-to-redis-cloud",
      "title": "Sign in to Redis Cloud",
      "role": "content",
      "text": "Sign in to your account on the [Redis Cloud console](https://cloud.redis.io/#/login)."
    },
    {
      "id": "activate-saml-in-access-management",
      "title": "Activate SAML in Access Management",
      "role": "content",
      "text": "To activate SAML, you must have a local user (or social sign-on user) with the `owner` role. If you have the correct permissions, you will see the **Single Sign-On** tab.\n\n1. Add the information you saved previously in the **Google identity provider details** screen. This includes:\n\n    * **Issuer (IdP Entity ID)**: `Entity ID`.\n    * **IdP server URL**: `SSO URL`.\n    * **Assertion signing certificate**: `Certificate`.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_1.png)\n\n   Select **Enable** and wait a few seconds for the status to change.\n\n1. Select **Download** to get the service provider (SP) metadata. Save the file to your local hard disk.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_3.png)\n\n1. Open the file in any text editor. Save the following text from the metadata:\n\n    * **EntityID**: The unique name of the service provider (SP).\n\n      ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_4.png)\n\n   * **Location**: The location of the assertion consumer service.\n\n  ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_5.png)"
    },
    {
      "id": "step-3-add-a-custom-attribute-to-google-workspaces-user-profile",
      "title": "Step 3: Add a custom attribute to Google Workspace's user profile",
      "role": "content",
      "text": "1. From the main menu in Google Workspace, select **Directory** then **Users**, and from the **more options** dropdown select **Manage custom attributes**.\n   \n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_7.png)\n\n1. From the **Manage user attributes** screen, select **Add Custom Attribute**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_8.png)\n\n1. Add the following information for the new custom attribute:\n\n   * **Category**: `Redis Cloud`\n   * **Name**: `redisAccountMapping`\n   * **Info type**: `Text`\n   * **Visibility**: `Visible to user and admin`\n   * **No. of values**: `Single`\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_9.png)\n\n   Once complete, select **Add**. The summary page now displays the new **redisAccountMapping** custom field.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_10.png)\n\n1. From the main menu in Google Workspace, select **Directory** then **Users**, then select the user you wish to configure. \n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_11.png)\n\n1. Each user who needs to access Redis Cloud through SAML needs to define the **redisAccountMapping** attribute. The `redisAccountMapping` key-value pair consists of the lowercase role name (owner, member, manager, billing_admin, or viewer) and your Redis Cloud Account ID found in the [account settings](https://redis.io/docs/latest/operate/rc/accounts/account-settings).\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_12.png)\n\n   Once complete, select **Save**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_13.png)\n\n   Repeat this step for each user who needs to define the `redisAccountMapping` attribute."
    },
    {
      "id": "step-4-finish-saml-configuration-in-google-workspaces-redis-cloud-application",
      "title": "Step 4: Finish SAML configuration in Google Workspace's Redis Cloud Application",
      "role": "content",
      "text": "1. Return to the **Service provider details** screen in Google Workspace, and add the following information:\n\n   * **ACS URL**: The Location from the downloaded service provider (SP) metadata\n   * **Entity Id**: The EntityID from the downloaded service provider (SP) metadata\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_6.png)\n\n   Leave the **Name ID** default information as it is. Once complete, select **Continue**.\n\n1. Configure the **Redis Cloud** application's attribute mappings. Select **Add Mapping**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_14.png)\n\n   In the next screen, map these attributes:\n\n   * **Primary Email**: `Email`\n   * **First name**: `FirstName`\n   * **Last name**: `LastName`\n   * **redisAccountMapping**: `redisAccountMapping`\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_15.png)\n\n   Once complete, select **Finish**.\n\n1. Next, we need to turn on the Redis Cloud service for all users, select **Web and mobile apps** -> **Redis Cloud** and then **service status**. Select **ON for everyone**. Once complete, select **Save**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_16.png)"
    },
    {
      "id": "step-5-activate-saml-integration",
      "title": "Step 5: Activate SAML integration",
      "role": "content",
      "text": "The final step in our SAML integration with AWS IAM identity Center is to activate the SAML integration.\n\n1. In the Single Sign-On screen, select **Activate**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_8.png)\n\nA logout notification screen displays, letting you know that you are redirected to Google's login screen.\n\n1. Select the Google account you wish to login with.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/google_workspace_saml_18.png)\n\nIf everything is configured correctly, you will see the the Redis Cloud console screen. Your local account is now considered a SAML account. \n\nTo log in to the Redis Cloud console from now on, click on **Sign in with SSO**.\n\n![Sign in with SSO button](https://redis.io/docs/latest/images/rc/button-sign-in-sso.png)"
    }
  ],
  "examples": []
}