Already a NinjaOne customer? Log in to view more guides and the latest updates.

Configuring NinjaOne SAML in Google Workspace

  • Last Updated October 4, 2026

Topic

This guide explains how to set up Security Assertion Markup Language (SAML) with NinjaOne using Google Workspace.

Environment

NinjaOne platform

Description

SAML allows technicians to access the NinjaOne application using single sign-on (SSO) with their preferred provider. SAML can be used with both the standard and branded NinjaOne web application, which supports multiple Identity Providers (IdPs).

Any IdP that supports SAML 2.0 may be used. However, we have only tested and verified Azure, OneLogin, and Okta.

There are two different workflows related to SAML. Currently, only the workflow initiated by the service provider is enabled for NinjaOne SAML.

  • Service Provider (SP) initiated workflow: You navigate to NinjaOne to log in, and you are forwarded to the identity provider.
  • Identity Provider (IdP) initiated workflow: You navigate to your identity provider to log in, and you are forwarded to NinjaOne to log in.
NinjaOne provides the following setup steps as a courtesy to our partners. Because some of these steps are not performed in NinjaOne, they may change without notice. Refer to Google's documentation, Set up your own custom SAML app (external link), for more detailed information about setting up SAML SSO with Google Workspace.

For more information about setting up SSO in NinjaOne, refer to Login Security: Configure Single Sign-On in NinjaOne.

Adding the Google SAML App

To add the Google SAML app in NinjaOne, follow these steps:

  1. In your browser, navigate to admin.google.com  → Apps → Web and mobile apps → Add app → Add custom SAML App.
  2. Give the application a name and click Continue.
  3. Google will direct you to a page titled Google Identity Provider Detail. Click Download MetaData.
  4. In NinjaOne, navigate to Administration → Accounts → Identity Providers → Add Provider. The Configure SSO page will open.
  5. In the Import Metadata from field, select File from the drop-down menu. Upload the metadata XML file you downloaded in the previous step.
  6. Copy the Reply URL from NinjaOne, and paste it into the ACS URL section on the Google site. 
  7. Copy the SP Identifier (Entity ID) from NinjaOne and paste it into the Entity ID field in Google. Start URL can remain blank, but you should check Signed response. Copy all of this information down, as you will not be able to access it again.
  8. In Google, set the Name ID format to EMAIL and the Name ID to Basic Information → Primary email.
  9. Click Finish.
  10. In the Google Admin Center, ensure that the service status for the users or groups who will use the app is set to ON, or you can select On for everyone. This change may take a few minutes to take effect.
  11. Navigate back to NinjaOne. The Configure SSO Screen should still be open. Click Test Connection. 
  12.  Click Save.
  13. Since Google does not have SCIM, you will need to create your users manually before they can use SSO in NinjaOne. In NinjaOne, navigate to + → Add User. Select the user type, assign the user a role, and enter a name and email.
  14. Click the Security tab. Change the user's authentication type from Native to SSO.
  15. Click Save.
When you create a new user, NinjaOne will automatically send an invitation to the user. If the user does not accept the invite, they will be unable to log in.
  • During setup, make sure to click the Signed Response button and change the Name ID format to email at the bottom of the page.
  • To successfully set up SSO in NinjaOne, we recommend you open a new browser or an incognito window. If you try to do this in a browser while already logged in to Google Workspace, the process may fail.

Additional Resources

To learn more about NinjaOne's identity services, refer to:

FAQ

Next Steps