Setting up SAML with Google

Google SAML authentication is only available on Pro and Enterprise plans (both self-hosted and on Metabase Cloud).

  1. Set up a custom SAML application with Google (the identity provider).
  2. Configure SAML in Metabase (the service provider).

For more information, check out our guide for authenticating with SAML.

How to fill out SAML settings in Google and Metabase

Metabase SAML Google SAML
URL the IdP should redirect back to Google Admin console > Service Provider Details > ACS URL. This is the same as your Metabase URL – it should start with https:// and end with /auth/sso.
Users email attribute Google Admin console > Attribute mapping
Users first name attribute Google Admin console > Attribute mapping
Users last name attribute Google Admin console > Attribute mapping
SAML Identity Provider URL Google Admin console > Google Identity Provider details > Copy the SSO URL
SAML Identity Provider Certificate Google Admin console > Google Identity Provider details > Download certificate
SAML Application Name Google Admin console > Google Identity Provider details > Copy the Entity ID
SAML Identity Provider Issuer Google Admin console > Google Identity Provider details > Download metadata

Troubleshooting SAML issues

For common issues, go to Troubleshooting SAML.

Thanks for your feedback!

See something that needs fixing? Propose a change.