How Do I Set Up Single Sign-On with Google Workspace?

Last updated: November 14, 2026

Your team can log in to Ambition with their Google work accounts once you've set up the single sign-on (SSO) connection in your team's instance. You'll create a custom SAML app in Google, then finish the setup in Ambition.

Required permissions:

  • The Super Admin role in Google Workspace is required to create a custom SAML app.

  • The system Admin permission set is required to see the Single Sign-On page in Ambition.

  • The Integrations: Edit permission is required to finish the setup in Ambition.

Create the SAML App in Google

  1. In the Google Admin console, go to Apps --> Web and mobile apps.

  2. Click on Add app and select Add custom SAML app.

  3. Enter "Ambition" as the app name and continue.

  4. Download the IdP metadata and host the file at a public URL.

  5. Enter https://yourcompany.ambition.com/account-management/login/ as the ACS URL, Entity ID, and Start URL, using your Ambition subdomain.

  6. Select EMAIL as the Name ID format and Basic Information > Primary email as the Name ID.

  7. Map First name to an app attribute named FirstName and Last name to one named LastName, then click on Finish.

  8. Turn on the app for the applicable employees.

Finish in Ambition

  1. Go to Admin --> People --> Single Sign-On and fill in the form with your hosted metadata URL.

  2. Use FirstName and LastName as the attribute names.

  3. After saving, your team can log in with their Google Workspace accounts.

Related Articles