This topic outlines the steps necessary to enable Google as IdP.

Avi Load Balancer as SP and Google as IDP

To set up Google G-suite as your SAML Identity Provider, follow these steps.

  1. Navigate to your Google G-suite admin page.

  2. From the Admin console Home page, navigate to Apps > SAML Apps. To see Apps on the Home page, it might be necessary to click More controls at the bottom.

  3. Click the plus (+) icon in the lower-right to add a new SAML app.



  4. Click Set up my own custom app.



  5. The Google IdP Information window opens and the SSO URL and the Entity ID fields automatically populate. Choose Option 2, download your IdP metadata.



  6. In the Basic Application Information window, enter an Application Name and Description.



  7. In the Service Provider Details window, add ACS URL and Entity ID. The ACS URL and the Entity ID are provided by the Avi Load Balancer. You can select EMAIL as the Name ID Format.



  8. Switch the service status for SAML App from OFF to ON for everyone.



This completes the process of creating an application on Google. Once configuration is complete on Google, configure a virtual service in Avi Load Balancer to act as service provider. For more information, see SAML Configuration on Avi Load Balancer topic in the VMware Avi Load Balancer Configuration Guide.