# Google Workspaces setup

> Learn how to set up Google Workspace as an identity provider for Sketch with the help of our step-by-step guides and video tutorials.

**URL:** https://www.sketch.com/docs/getting-started/single-sign-on/setting-up-saml-sso/setup-identity-provider/google-workspaces/ | **Last updated:** 2026-01-23

---
1. Sign in to your Google Workspace as an Admin.
1. Click on **Apps** > **Overview** > **Web and mobile apps**.
   ![An image showing the apps section in Google Workspaces](https://cdn.sketch.com/docs/sso/googlews2_apps-web-mobile-apps-2.png)
1. Click on **Add app** > **Add custom SAML app**.
   ![An image showing the add app menu in Google Workspaces](https://cdn.sketch.com/docs/sso/googlews3_add-app-2.png)
1. Type `Sketch` in the App name field and upload [Sketch’s logo](https://cdn.sketch.com/docs/sso/sketch-logo.png). Click **Continue** when you’re ready.
   ![An image showing where to type a name for the application](https://cdn.sketch.com/docs/sso/googlews4_typeSketch.png)
1. Download the IdP Metadata .XML file — you’ll need it to finish setting up SAML SSO in your Workspace. Click **Continue**.
   ![An image showing how to download the app metadata](https://cdn.sketch.com/docs/sso/googlews5_download-metadata.png)
1. Use the EntityID and ACS URL values that you got when [setting up SAML SSO in your Workspace](/docs/getting-started/single-sign-on/setting-up-saml-sso/choose-a-shortname/). Remember — these are unique to your Workspace.

    - You’ll need to place the **EntityID** value in **Audience** field.
    - Set the **ACS URL** value in the **ACS URL** field.

    The rest of the fields should be filled as follows:
    - **Start URL**
    - **Signed Response**: tick the checkbox
    - **Name ID**: Basic information - Primary Email
    - **Name ID Format**: UNSPECIFIED

    **Note**: Make sure that there are no spaces at the end of these fields. Otherwise, the SSO process will fail.

    ![An image showing where to include the service provider details](https://cdn.sketch.com/docs/sso/googlews6_service-provider-details.png)
1. Click **Continue**.
1. Click **Add Mapping**.
   ![An image showing how to add a new mapping](https://cdn.sketch.com/docs/sso/googlews7_add-mapping.png)
1. Add the following three mappings:
    ![An image showing three mappings parameters](https://cdn.sketch.com/docs/sso/googlews8_add-three-mappings.png)
1. Click **Finish.**
1. Once you’re done, user access will be off. Click on the **User access** card.
    ![An image showing that user access is off by default](https://cdn.sketch.com/docs/sso/googlews9_user-access.png)
1. Enable access for everyone — or for the users and groups that you want.
    ![An image showing how to change user access preferences](https://cdn.sketch.com/docs/sso/googlews10_enable-user-access-2.png)
1. Head to [How to finish setting up SAML SSO in your Workspace](/docs/getting-started/single-sign-on/setting-up-saml-sso/finish-setting-saml-sso/) to finish the SAML SSO process in Sketch.