How to Add Custom SAML App in Google Workspace

Step 1:

1. In your Google Admin console (at admin.google.com)...

2. Go to Menu  Apps > Web and mobile apps

Step 2: Click Add App > Add custom SAML app.

Enter the app name and, optionally, upload an icon for your app. The app icon appears on the Web and mobile apps list, on the app settings page, and in the app launcher. If you don't upload an icon, an icon is created using the first two letters of the app name.

Click Continue.

Step 3: 

On the Google Identity Provider details page, get the setup information needed by the service provider using one of these options:

• Download the IDP metadata.
• Copy the SSO URL and Entity ID and download the Certificate

Step 4:

Contact your service provider for these field values. In the Service Provider Details window, enter:

• ACS URL—The service provider's Assertion Consumer Service URL receives the SAML response. It must be
  https://{ourAuth0Domain}/login/callback?connection={yourConnectionName}
  For instance:
  https://dev-wo7utk2uw6doynww.us.auth0.com/login/callback?connection={yourConnectionName}
  
  
• Entity ID—The globally unique name :
  urn:auth0:{ourTenant}:{yourConnectionName}
  For instance:
  urn:auth0:dev-wo7utk2uw6doynww:{yourConnectionName}

Step 5:

Add mapping for some fields.

It should be :

Primary email -> email
First Name -> first_name

Last Name -> last_name

Click Finish, and then specify group of people who should have an access to SSO.