Skip to main content
Google Workspace is an identity provider (IdP) you can connect to Sevalla with SAML single sign-on (SSO). You add a custom SAML app in the Google Admin console with the values Sevalla shows, then paste Google’s values into Sevalla. For how SSO works in Sevalla, see Single sign-on.

​
Before you begin

  • You’re a company owner or admin in Sevalla.
  • You can add apps in the Google Admin console (admin.google.com).
  • Your Sevalla account uses an email address on your company’s domain, and you have a Google Workspace user with the same address. The setup test signs you in with it.

​
Values to copy

From Sevalla’s Create SAML app step into Google: From Google’s Google Identity Provider details into Sevalla’s Sevalla setup step:

​
Start the setup in Sevalla

1

Open the wizard

In the sidebar, under Company, click Single sign-on. On the Single sign-on card, click Enable (or Continue setup).
2

Go to the values

Click Continue to reach Create SAML app. Keep this tab open: you’ll copy its values into Google.

​
Create the SAML app in Google Workspace

1

Start a custom SAML app

In the Google Admin console, go to Apps > Web and mobile apps. Click Add app > Add custom SAML app.
2

Name the app

In App name, enter Sevalla. Optionally, add the description and upload the Sevalla logo in App icon. Click Continue.
3

Copy Google's details

Google now shows Google Identity Provider details. Copy the SSO URL and the Entity ID, and download the Certificate. You paste them into Sevalla in Add the Google details to Sevalla. Click Continue.
4

Enter the service provider details

Fill in ACS URL (https://my.kinsta.com/saml/receive), Entity ID (https://my.kinsta.com/saml) and Start URL (https://my.kinsta.com/login/saml). Select Signed response. Set Name ID format to EMAIL and Name ID to Basic Information > Primary email. Click Continue.
5

Map the attributes

Click Add mapping for each row, then click Finish:
Google's attribute mapping with First name, Last name and Primary email mapped to firstName, lastName and email

​
Give people access to the app

Only people with access to the app can sign in to Sevalla with Google Workspace. A new custom SAML app is off for everyone until you turn it on.
1

Open user access

In Apps > Web and mobile apps, click the Sevalla app, then click User access.
2

Choose who gets the app

Select ON for everyone, or pick the groups or organizational units that should have access and turn the app on for them. Click Save. Include yourself, so you can run the test.

​
Add the Google details to Sevalla

1

Verify your email domain in Sevalla

In the Sevalla tab, click Continue to reach Sevalla setup. Under Email domain, add and verify your domain. See Verify your email domain.
2

Paste Google's values

Under Set up Sevalla SAML, paste:
  • SSO URL: Google’s SSO URL
  • Entity ID: Google’s Entity ID
  • Public certificate: the whole contents of the certificate file, including the BEGIN CERTIFICATE and END CERTIFICATE lines
Click Continue.

​
Test and set SSO live

On Test and finish, click Test authentication and sign in to Google. When Sevalla shows Authentication test was successful., click Save and set SSO live. If the test fails, see Troubleshoot SSO sign-in. Next, you can make SSO mandatory and turn on just-in-time provisioning.

​
Change the session length

Google Workspace’s session settings decide how long an SSO session lasts. If Google doesn’t send a session end time, Sevalla’s SSO session lasts 24 hours. To change it, see the Google Workspace Admin Help article on session length.