Set up Google Workspace as your SAML Identity Provider

This article provides instructions for setting up Google Workspace (formerly called G Suite) as your SAML Identity Provider (IdP). This allows internal users to sign in to Pendo using their Google account, instead of a separate email and password.

For further reading, you can also see:

SAML Single Sign-On (SSO) overview for help setting up SSO.

Set up your own custom SAML application to see Google's Workspace Admin Help documentation.

Prerequisites

• SAML SSO access included in your current Pendo contract.
• An admin account in Google Workspace.
• A SAML admin who’s able to manage IdP metadata, provide SAML metadata, and make access decisions for the subscription.

Step 1. Set up the Pendo application in Google Workspace

Sign in to your Google admin console from http://admin.google.com. Then, in your Google Workspace admin page:

1. Open Apps > Web and mobile apps from the left-side menu.
2. Open the Add app dropdown and select Add custom SAML app.
3. On the App Details page:
   • Enter Pendo as the name of the custom app.
   • Upload the Pendo chevron as the app icon (optional). Drag the icon at the end of this article to your desktop so that you can upload it.
4. Select Continue. This opens the Google Identity Provider details page in the Add custom SAML app workflow.

Step 2. Add values to the Pendo app in Google Workspace

1. Select Continue to open the Service provider details page of the workflow.
2. Enter the following information. 
   • ACS URL: https://sso.connect.pingidentity.com/sso/sp/ACS.saml2?saasid=c1dc3d4d-f04b-4c71-902f-af4895a57c21. This URL is for the US region. If your subscription is in the US1, EU, JP, or AU regions see Pendo SAML metadata, certificates, and configuration details for the correct ACS URL for your region.
   • Entity ID: PingConnect is the default value. If PingConnect is already in use in your IdP, see Pendo SAML metadata, certificates, and configuration details for a region-specific alternative. If you use an alternate Entity ID, contact Pendo Support to update your configuration on Pendo's side.
3. Select EMAIL as the Name ID format, and Primary Email as the Name ID.
4. Select Continue. This opens the Attribute mapping page, which you can skip.
5. Select Finish.

Step 3. Turn the Pendo SAML app on

From your Google Workspace admin page:

1. Open Apps > Web and mobile apps from the left-side menu.
2. Select the Pendo app that you created.
3. Open User access.
4. Select ON for everyone or On for some, depending on your setup.
5. Select Save.

Step 4. Set up SAML SSO in Pendo

Now that you've set up the Pendo app in Google Workspace, in the Google Identity Provider details page of the Add custom SAML app workflow, select Download Metadata. This downloads an XML metadata file that you'll need when you configure SAML SSO in Pendo.  For instructions, Set up SAML Single Sign-On (SSO).

The Pendo chevron

Below is the pink Pendo chevron to add as your app icon in Step 1. The icon appears on the Web and mobile apps list, the app settings page, and the app launcher. If you don't upload an image for the icon, the icon is created using the first two letters of the app name in Google Workspace.