# SSO Integrations Google Workspace offers SSO integrations that allow users to sign in via a third-party IdP. Google Workspace supports OIDC and SAML-based SSO protocols. ### Configuring SAML SSO Log in to the Admin Console and find **SSO with third party IdP** in the Security section. From there you will be prompted to set up a profile, upload a certificate, and provide SP details. Google allows for multiple SSO profiles to be added to a single Google Workspace account. ### Configuring OIDC SSO Setting up OIDC SSO profiles follows a similar process, with the addition that the Google Workspace admin who assigns the OIDC SSO profiles must match the primary email address of the Azure AD account, and all end users must have a valid Microsoft 365 license. ### Enabling SSO Once an SSO profile has been created, SSO can be enabled for specific organizational units such as groups from within the Admin console. Groups in organizational units can also be excluded from the SSO profile. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.the-cloud-storage-guide.io/cloud-storage-platforms/google-workspace-overview/users-and-groups/sso-integrations.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.