Setting up single sign-on for Google Workspace

Set up SAML-based single sign-on (SSO) between Google Workspace and Form LMS.

✅ Before you start: You need the following:

• Single sign-on enabled and activated on your Form LMS site.
• The ACS URL and Entity ID from Form LMS (provided by the Form team).
• Administrator access to your Google Admin Console.

Set up the SAML app in Google

1. Sign in to your Google Admin Console at admin.google.com with an administrator account.
2. From the Admin console home page, go to Apps → Web and mobile apps.
3. Add a custom SAML app. Give it a name and optionally upload an icon.
4. Download the IDP metadata and save it for later.
5. Click Continue.
6. Paste in the ACS URL and Entity ID provided to you.
7. Tick the box for Signed Response.

Configure the Name ID

Form LMS uses the primary email address as the User ID.

1. For Name ID Format, select EMAIL.
2. For Name ID, select Basic Information → Primary Email.

No attribute mapping is needed. Click FINISH.

Set app visibility

Check who can see the application you created. You can add it to groups or organisation units, or select everyone.

Complete the setup

1. Share the metadata you downloaded earlier with the Form team.
2. Wait for confirmation that setup is complete.

Single sign-on is now active.