# Google

:::info
**Note:** This login method is only available in the licensed Business + Enterprise editions

:::


This guide walks you through setting up SAML with **Google**, Outline also supports using [OAuth](/doc/google-hOuvtCmTqQ) and [OIDC](/doc/oidc-8CPBm6uC0I) with Google in all editions.

## Create Application


1. Go to [Apps → Web and mobile apps](https://admin.google.com/ac/apps/unified) (You will likely need to sign-in)
2. Click **Add app → Add custom SAML app**
3. Add the name “Outline”
4. Copy the SSO URL, entity ID, and certificate

## Service provider details

On the next screen, set the following values and click Continue

* `ACS URL` is set to `https://yourdomain.com/auth/saml.callback`
* `Entity ID` is set to `https://app.getoutline.com`
* `Start URL` is set to `https://yourdomain.com/auth/saml`
* `Name ID format` is set to “EMAIL”


 ![Example Google SAML setup](https://outline-production-attachments.s3-accelerate.amazonaws.com/uploads/292079f8-0319-4111-bb5b-315e8ae8f14e/91731da8-b06b-42ff-a83b-6baf54bd3a03/image.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA4EOUDTOVUICLPZ4P%2F20260905%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260905T161500Z&X-Amz-Expires=86400&X-Amz-Signature=97f39171216a2af6485126047002742075ac4708369cece441332d9730dd42dd&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject " =1130x830")

## Attribute mapping

Setup the following mappings, and click “Finish”.

* “First name” → `fName` 
* “Last name” → `sName`
* “Primary email” → `email`


 ![Google SAML attribute mapping](https://outline-production-attachments.s3-accelerate.amazonaws.com/uploads/292079f8-0319-4111-bb5b-315e8ae8f14e/bdb30d4e-8817-432f-952b-ed5a36d2defd/image.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA4EOUDTOVUICLPZ4P%2F20260905%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260905T161500Z&X-Amz-Expires=86400&X-Amz-Signature=b0c752fdbda4599ec600c86f09c104aaddaa55a60ab8e4900eafadbe681de0d3&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject " =1115x874")

## Configure Outline

Now we need to tell Outline where to find our Google application. Two new environment variables must be set inside of the environment (Usually `docker.env`). Once the server is restarted, if all is setup correctly you should see a new option to “Continue with SAML” on the login screen.

| Environment variable |     |
|----------------------|-----|
| `SAML_SSO_ENDPOINT`  | Use the value from `SSO URL` in the first step above |
| `SAML_CERT`          | Use the value from `Certificate` in the first step above. In a text editor delete the “-----BEGIN CERTIFICATE-----” and “-----END CERTIFICATE-----” text and all new lines. The resulting cert should be on a single line. |

---

**Documents**

- [License restrictions](https://docs.getoutline.com/s/hosting/doc/license-restrictions-f9aq6uEL3H)
- [Requirements](https://docs.getoutline.com/s/hosting/doc/requirements-ULdYnwi4wG)
- [Installation methods](https://docs.getoutline.com/s/hosting/doc/installation-methods-pSvgz9j0QC)
- [Configuration](https://docs.getoutline.com/s/hosting/doc/configuration-509J4lAzjo)
- [Business + Enterprise](https://docs.getoutline.com/s/hosting/doc/business-enterprise-rv0715NxO3)
- [Backups](https://docs.getoutline.com/s/hosting/doc/backups-KZtPOADCHG)
- [Troubleshooting](https://docs.getoutline.com/s/hosting/doc/troubleshooting-HXckrzCqDJ)