# Google SSO Configuration Guide (/docs/security/sso/google-sso-guide)

## Prerequisites [#prerequisites]

Ensure you have read the [SSO Setup article](./setting-up-sso.mdx) to ensure you have configured the baseline and prepared for your IDP SSO connection.

## Configuration Steps [#configuration-steps]

1. Go to [Google Admin](https://admin.google.com/) and select Apps.

   ![39717c2 Screen Shot 2019 11 04 At 3.59.44 PM](/images/39717c2-Screen_Shot_2019-11-04_at_3.59.44_PM.png)

2. Select "SAML apps"

3. Click the + sign on the bottom right

   ![1ff07de Screen Shot 2019 11 04 At 4.00.07 PM](/images/1ff07de-Screen_Shot_2019-11-04_at_4.00.07_PM.png)

4. Take note of your **SSO URL**, **Entity ID**, and download the **Certificate**

   ![73f012d Screen Shot 2019 11 04 At 4.00.19 PM](/images/73f012d-Screen_Shot_2019-11-04_at_4.00.19_PM.png)

5. Click Next.
   Under Application Name, enter _Transcend_.
   Feel free to add a description, like "Transcend's Data Privacy Infrastructure manages personal data across distributed data systems and vendors."
   You can download our App Icon [here](https://misc-assets-transcend.s3.amazonaws.com/brand/unpadded/Transcend+Logo+Mark+%28Color%29.png) and click **Upload Logo**.

   ![9791140 Screen Shot 2019 11 04 At 4.01.17 PM](/images/9791140-Screen_Shot_2019-11-04_at_4.01.17_PM.png)

6. Click Next to proceed to Service Provider Details

Under **ACS URL** enter `https://api.transcend.io/saml` for the EU backend, or `https://api.us.transcend.io/saml` for the US backend
   Under **Entity ID** enter `transcend`
   Check **Signed Response**
   Under **Name ID** select `Basic Information` / `Primary Email`
   Under **Name ID Format** select `EMAIL`

   ![44bb67b Screen Shot 2019 11 04 At 4.03.56 PM](/images/44bb67b-Screen_Shot_2019-11-04_at_4.03.56_PM.png)

7. Click Next to proceed to Attribute Mapping

Type `firstName` and select `Basic Information` / `First Name`
   Type `lastName` and select `Basic Information` / `Last Name`
   Type `login` and select `Basic Information` / `Primary Email`
   Type `title` and select `Employee Details` / `Title`
   Type `department` and select `Employee Details` / `Department`

8. Copy the information from Step 4 into Transcend on the [Administration / Single Sign On](https://app.transcend.io/admin/sso) tab on the Admin Dashboard.

Enter your:
   - **Entity ID** into **Identity Provider Issuer**
   - **SSO URL** into **Identity Provider Single Sign-On URL**
   - **Certificate** into **X.509 Certificate**. You'll need to open the `.pem` file your downloaded in a text editor and copy the text in.