a colorful circle logo on a black background

1. Login to your Google Workspace account (https://admin.google.com/AdminHome) with administrator credentials.

2. Click the Apps icon.

a screenshot of a phone

3. Click the SAML Apps icon.

4. On the SAML Apps page, click Add a service/App to your domain link.

a screenshot of a search box

5. Click Setup My Own Custom App.

a screenshot of a computer

6. On the Google IdP Information page, scroll down and click the Download button in the Section 2 - IDP Metadata section and click Next. Save the file to your local drive.

a screenshot of a computer

7. In the Application Name field, type Valimail Enforce. Click the Upload Logo button and upload the following image file:

Valimail App Logo

a screenshot of a computer

8. On the Service Provider Details page, enter the following details:

- ACS URL: https://app.valigov.com/sso/consume

- Entity ID: https://app.valigov.com

- Start URL: https://app.valigov.com/users/sign_in

- Name ID Format should be set to EMAIL

Then click Next.

a screenshot of a contact form

9. On the Attribute Mapping page, add the following mappings as depicted, then click Finish.

Note: the attribute names must exactly match those depicted -- they are case- and whitespace-sensitive.

a screenshot of a computer

10. The Google SSO-portion of the configuration is now complete.

a close-up of a message

11. Now login to https://app.valigov.com, click your Account Name (in the upper-right corner), and click Account Settings.

12. Click Setup in the Authentication > Single Sign-On section.

13. Enter the following information:

  • IdP Metadata File: click Choose File and upload the file you saved in Step 6.

  • Enable JIT Provisioning (optional): Check this option to enable Just In Time (JIT) Provisioning.

  • Provisioning Domains (for JIT): Add one or more provisioning domains.

  • Click Enable.a screenshot of a computer

14. Before testing SSO, ensure the users you wish to test with are listed as users in  Account Settings > Users section (unless JIT Provisioning is enabled, in which case this is not necessary).

⚠️ If SSO was unsuccessful and you're unable to login to Valigov Enforce, just email support@valimail.com for assistance.