# Google Workspace Setup #

As an optional step, you may set up integration with Google Workspaces for your Single Sign-On Portal.
This will allow your employees to log in to their Workspace using Xiid’s secure authentication
mechanisms. If your company is using Google Workspace, follow these steps below to configure your
Google Workspace Integration with Xiid.

## IdP Consumer Setup ##

Start by signing in to the Xiid Agent Management Portal and navigating to the __IdP Consumers__ tab.

On the IdP Consumers screen, click the purple __Add New IdP Consumer__ button in the top left.

Provide a Friendly Name for the IdP Consumer configuration and a Display Name that users will see in
the SSO Portal.

Under the __Type__ dropdown, select __Google__, then click the __Next__ button.

Select an __Internal to External Translator Group__ that translates from your internal LDAP credentials to
your Google Workspace credentials. (See the [Translator Setup](https://docs.xiid.com/src/integrate_applications.html#translator-setup)
section for more information).

Click the __Next__ button and select the relevant firewalls for your Google Workspace or select the __Default Firewall__.

On the __Parameters__ screen, enter the domain tied to your Google Workspace account. You can verify the
domain tied to your Google Workspace account by signing into the Google Admin area and selecting
__Account->Domains__ from the left-side navigation.

Last, click the green __Create IdP__ button at the bottom.

You will now see a new Google IdP Consumer listed in your IdP Consumers List.

## Workspace Integration Configuration ##

After your IdP Consumer is set up, you need to finish configuring your Google Workspace
integration with Xiid.

To get started, find your Google IdP Consumer in the IdP Consumers List, and
click the __purple question mark “?” button__. (Shown below in Green).

![Xiid Google IdP Consumer with Purple Button Highlighted](images/GSuiteHelpButtonHighlighted.png)

This will pop up a new window with the last configuration steps necessary to finish your
integration with Google Workspaces.

Follow the steps on the screen by signing into your Google Workspace account and clicking on the
__Admin App__ in your list of Applications.

From the Admin App Screen, click the __Security__ dropdown and select __Overview__ (the __Settings__ option
shown on the Xiid Agent Integration window is not available on newer versions of Google Workspace).

Find the setting dropdown on the right side of the Security Overview screen that is called
__“Set Up Single Sign-On (SSO) With a Third Party IdP”__ and click the setting.

Click the section entitled __“SSO profile for your organization”__ to edit your SSO settings.

You can also find the SSO configurations by selecting __Security->Authentication->SSO with Third Party IdP__.
(Shown below in blue).

Check the box for __“Set up SSO with third-party identity provider”__ (shown below in red) and then copy
the __Sign-In/Sign-Out URL__ from the Xiid Agent Google Workspace Integration screen
(on the __Set SSO and SLS__ step) and paste them in their respective fields in the 
Google Workspace Admin settings (shown below in green).

Next, download the certificate from the Xiid Agent Integration screen on the __Load Certificate__ step, and
then go to the Google Workspace Admin app, click the __Replace Certificate__ text in blue, and then upload
your certificate (shown below in purple).

![Google Workspace Admin App with Highlighted Sections](images/google_workspace_sso_highlighted.png)

Last, click the __Save__ button at the bottom of the Google Workspace Admin app to persist the changes.

After the settings are saved in Google Workspace, go back to the Xiid Agent Integration screen, and click
green __Finish__ button.

Now your Google Workspace is set up, and you can sign directly into your workspace using the Xiid
Single Sign-On Portal.