Google Apps (SAML 2.0)
  • 29 Apr 2024
  • 2 Minutes to read
  • Contributors

Google Apps (SAML 2.0)

Article summary


This article outlines the methods to set up Google Suite as your identity provider using either Google Service or Google SAML applications.

By integrating with Google Suite, Harmony SASE can authenticate users seamlessly.


Configuring the app at the G suite management console

  1. Open the G Suite management console.

  2. Select Apps.

  3.  Select Add custom SAML app.

  4. Enter the desired name, description, and logo.

    The app logo is optional and can be found using this link

  5.  Copy the SSO URL and download or copy the certificate, then select next.

  6. Fill in the following information:


Click on the "add mapping" button to create 4 different rows and then fill in the following attributes:

(every attribute will have its own row) 

1. Basic Information -> Primary email: email 

2. Basic Information -> Last Name: family_name

3. Basic Information -> First Name: given_name

4. Employee Details -> Department: groups 


Once the application has been created select Status, and then turn it on for everyone.

Configuring Harmony SASE

You need to configure the integration from the Harmony SASE side.

  1. Log in to your Harmony SASE Management Platform, navigate to Settings and then IdentityProviders.
  2. Select + Add Provider.
  3. Select SAML 2.0 Identity Providers.
  4. Fill in SSO URL.
  5. Add your organization domain.
  6. Upload the certificate
  7. Select Done.


  • When choosing between Google Service and Google SAML applications, consider the potential cost implications on Google's side for using Google Services.
  • A SAML integration mandates all users to authenticate using Google Suite, whereas a Google Service setup offers more flexibility, allowing specific user groups only.
  • Ensure you have the necessary permissions in both Google Suite and Harmony SASE for a successful integration.
  • When setting up, always replace placeholders with the correct values, such as your workspace name.
  • Save the generated Google Client ID and Client Secret for later use in Harmony SASE.
  • If connecting to Google Suite enterprise domains, remember to enable the Admin SDK service.
  • Periodically review your Google Suite configuration settings to ensure alignment with any updates or changes in the Harmony SASE platform.


If you encounter issues during or after the setup, try reviewing your settings to ensure everything matches the instructions. In particular, check the IP addresses and other details you entered during setup. If issues persist, please consult our dedicated support.

Support Contacts

If you have any difficulties or questions, don't hesitate to contact Harmony SASE's support team. We offer 24/7 chat support on our website at, or you can email us at We're here to assist you and ensure your VPN tunnel setup is a success

Was this article helpful?