# Google G Suite

## Overview

[Google Workspace](https://workspace.google.com/) is a collection of cloud computing, productivity and collaboration tools, software and products developed and marketed by Google.

Using Security Assertion Markup Language (SAML), a user can use their managed Google account credentials to sign in to enterprise cloud applications via single sign-on (SSO). An identity and access management (IAM) service provides administrators with a single place to manage all users and cloud applications. You don't have to manage individual user IDs and passwords tied to individual cloud applications for each of your users. An IAM service provides your users with a unified sign-on across all their enterprise cloud applications.

Full documentation is available at <https://support.google.com/a/answer/6087519?hl=en>

## Setup Labii SSO with Google G Suite

To use Google G Suite as your SAML IdP to connect with Labii:

1. Login to **Google Admin**
2. Create an app: **App -> SAML App -> Click "+" button -> SETUP MY OWN CUSTOM APP**
3. Download the "**IDP metadata**" and copy the content to **Metadata XML** in your Labii SSO Settings.
4. In the "**Basic information for your Custom App**" page, type in "Labii" or "Labii ELN & LIMS" for your app name. Use [this link](https://www.google.com/search?q=labii+logo\&rlz=1C5CHFA_enUS705US705\&source=lnms\&tbm=isch\&sa=X\&ved=0ahUKEwipgPnjicvgAhVRjp4KHbhkBI4Q_AUIDigB\&biw=1920\&bih=970\&dpr=1) to download the Labii logo.
5. In the "**Service Provider Details**" page, copy and paste **ACS URL, Entity ID**. Set **Name ID Format=Email**
6. On the **Attribution Mapping** page, add
7. Create the app.
8. To use the app, the service has to be enabled. App -> Edit Services -> On for everyone. Now refresh your google pages, you shall be able to see Labii in the app list.
9. In the Labii SSO Setting page, copy the link of Labii login to **IdP Login URL**
10. Set the **IdP Logout URL** as [`https://admin.google.com/a/cpanel/logout?continue=https://v3.labii.com`](https://admin.google.com/a/cpanel/logout?continue=https://v3.labii.com)

## Errors

<mark style="background-color:red;">Error: malformed\_certificate</mark>

Your certificate may have expired. Log into your Google Admin Console and examine the expiration date on the certificate.

1. Google Admin -> Apps -> Web and mobile apps -> Select your app -> Certificate -> Manage Certificate
2. Click **Download Metadata** to download IdP metadata, and then copy the content and paste to **Metadata XML** in Labii SSO


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.labii.com/admin-guide/single-sign-on/google-g-suite.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.