> For the complete documentation index, see [llms.txt](https://intuitem.gitbook.io/ciso-assistant/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://intuitem.gitbook.io/ciso-assistant/features-focus/sso/identity-providers/google-workplace.md).

# Google Workspace

{% hint style="danger" %} <mark style="color:red;">Google Workspace doesn't allow callbacks to urls containing</mark> <mark style="color:red;"></mark><mark style="color:red;">`http`</mark> <mark style="color:red;"></mark><mark style="color:red;">or</mark> <mark style="color:red;"></mark><mark style="color:red;">`localhost`</mark> <mark style="color:red;"></mark><mark style="color:red;">so it can be tricky to test it locally. You should deploy CISO Assistant with a FQDN to bypass these restrictions.</mark>
{% endhint %}

Go into **Google Workspace Admin console**

1. On the sidebar menu, go to **Applications** > **Web and mobile applications**

   <figure><img src="/files/mwiIPsKoCtyPlgqhDA1B" alt=""><figcaption></figcaption></figure>
2. Click on **Add an application** > **Add a custom SAML Application**

   <figure><img src="/files/AxytLf1FGmVs6oruMCyU" alt=""><figcaption></figcaption></figure>
3. Enter **ciso-assistant** or the name of your choice and click on **continue**

   <figure><img src="/files/vOMKzSQ6E6veD1Cmddqd" alt=""><figcaption></figcaption></figure>
4. You can copy the <mark style="color:purple;">**SSO URL**</mark>, <mark style="color:purple;">**Entity Id**</mark> and <mark style="color:purple;">**x509 certificate**</mark> here but you'll be able to retreive them later

   <figure><img src="/files/8b5mTTsnyQ7PQffwfFGH" alt=""><figcaption></figcaption></figure>
5. Fill **ACS URL** with `<base_url>/api/accounts/saml/0/acs/`, enter the **Entity ID** which has to be the same than <mark style="color:purple;">**SP entity Id**</mark> in CISO Assistant (**ciso-assistant** by default) and choose **Email** in **Name ID Format**<br>

   <figure><img src="/files/mBYND5uD5asW3yJDWeWG" alt=""><figcaption></figcaption></figure>
6. Add two mappings for **First name** and **Last Name**, fill them with those two values: `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname`\
   `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname`

   <figure><img src="/files/sd21XYdKuPlxutCYyR1k" alt=""><figcaption></figcaption></figure>
7. On application home page, you can now find the <mark style="color:purple;">**Entity ID**</mark>, <mark style="color:purple;">**SSO URL**</mark> and <mark style="color:purple;">**x509 certificate**</mark><br>

   <figure><img src="/files/dEB4dSse8XzIHNo53jbv" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %} <mark style="color:orange;">Add a user in your application doesn't automatically create the user on CISO Assistant</mark>
{% endhint %}

You can now [configure CISO Assistant](https://intuitem.gitbook.io/ciso-assistant/features-highlights/sso#configure-ciso-assistant-with-saml) with the <mark style="color:purple;">**3 parameters**</mark> you've retrieved.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://intuitem.gitbook.io/ciso-assistant/features-focus/sso/identity-providers/google-workplace.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.