Google SAML authentication is only available on Pro and Enterprise plans (both self-hosted and on Metabase Cloud).
For more information, check out our guide for authenticating with SAML.
| Metabase SAML | Google SAML |
|---|---|
| URL the IdP should redirect back to | Google Admin console > Service Provider Details > ACS URL. This is the same as your Metabase URL – it should start with https:// and end with /auth/sso. |
| Users email attribute | Google Admin console > Attribute mapping |
| Users first name attribute | Google Admin console > Attribute mapping |
| Users last name attribute | Google Admin console > Attribute mapping |
| SAML Identity Provider URL | Google Admin console > Google Identity Provider details > Copy the SSO URL |
| SAML Identity Provider Certificate | Google Admin console > Google Identity Provider details > Download certificate |
| SAML Application Name | Google Admin console > Google Identity Provider details > Copy the Entity ID |
| SAML Identity Provider Issuer | Google Admin console > Google Identity Provider details > Download metadata |
For common issues, go to Troubleshooting SAML.
