help

Book a demo
Sign in
English

help

help

Integrations

>

Google SAML SSO Integration

Configure Google SAML SSO for Yoffix

Yoffix supports Single Sign-On (SSO) via Google Workspace using SAML 2.0.

This allows users to sign in to Yoffix using their Google Workspace credentials, ensuring centralized authentication and secure access control.

For other supported SSO providers please see the dedicated pages

All SSO configuration in Yoffix is available under:

Settings → SSO

Set Up Google SAML SSO Integration for Yoffix

Step 1: Log in to Google Admin Console

Go to:

https://admin.google.com/

Sign in with your administrator account.

Step 2: Add a Custom SAML App

  1. Navigate to:
    Apps → Web and mobile apps

  2. Click Add app → Add custom SAML app

SSO SAML Instruction image 2-1

  • Enter your organization’s name as the App Name

  • Click Continue

SSO SAML Instruction image 2-2

You will see the IdP metadata screen. Download the metadata now or after finishing the setup.

Copy SSO URL and save in your favorite text editor

Click Continue.

SSO SAML Instruction image 2-3

Step 3: Configure Service Provider Details

Enter the following values:

  • ACS URL:
    https://api.app.yoffix.com/sso/saml/assert

  • Entity ID:
    https://api.app.yoffix.com/sso/saml/metadata

  • Start URL: Leave blank

For Name ID format, select:
EMAIL

For Name ID, select:
Basic Information → Primary Email

Click Continue.

SSO SAML Instruction image 2-4

Step 4: Configure Attribute Mapping

Under Attribute mapping, add the following attributes (case sensitive):

  • email → Primary Email (Basic Information)

  • first_name → First Name (Basic Information)

  • last_name → Last Name (Basic Information)

Click Finish.

SSO SAML Instruction image 2-5

Step 5: Enable User Access

After saving the application:

  1. Expand the User access section

  2. Set Service status to ON for everyone

  3. Click Save

SSO SAML Instruction image 3-1SSO SAML Instruction image 3-2

Your app information and IdP metadata will be visible on this page.
You will need this metadata for the Yoffix configuration.

Configure Google SSO in Yoffix

  1. Go to Settings → SSO in Yoffix

  2. Select Google

  3. Select SAML

  4. Enter the SSO URL from Google

  5. Add email domain(s) of your organization

You can configure up to 10 allowed email domains.

Example:
If your company emails follow the format name@yourorgdomain.com, add:

yourorgdomain.com

Only users with configured domains will be able to authenticate via Google SSO.