WiKey as a SAML IdP in Google Workspace
This guide will show you how to configure WiKey and Google Workspace to add WiKey as a SAML IdP in Google Workspace.
Last updated
This guide will show you how to configure WiKey and Google Workspace to add WiKey as a SAML IdP in Google Workspace.
Last updated
Before you continue, ensure you have downloaded and configured the WiKey authenticator app.
For Android, download the app here: For iOS, download the app here:
If you haven't already logged in to the WiKey admin, then log in with the WiKey authenticator app. In the dashboard: Add Certificate In WiKey, add a certificate of type X.509 with RSA crypto algorithm and download it. You need to remember the file's name as you will need it later on in the configuration.
If you previously created a certificate, you can on the WiKey dashboard go to: Identity -> Certs and then download the certificate to your computer. You need to remember the file's name as you will need it later on in the configuration.
On the application edit page, select the certificate you just created. Add the domain name of the Google application you will use in the Redirect URLs, such as google.com.
Copy the sign-in page URL. This will be used in the next step.
Paste the copied link to items number 3 & 4 in the Google add new SAML profile, sign in page URL and sign out page URL
In the Google Workspace Admin console, navigate to Security and then Overview. Look for the SSO with third-party IdP section. Click on "Add SSO profile" to access the editing page. Check the "Set up SSO with third-party identity provider" checkbox. Paste the copied sign-in page URL into the Sign-in page URL and Sign-out page URL fields. Upload the certificate downloaded in the previous step. Click "Save" to save the changes
Click on the upload certificate and choose the certificate file that you previously downloaded to your computer
In Google Workspace, create a user with the username "test" (you can customize the username, this is just an example).
In WiKey admin, add a user with the same username as set in Google Workspace. Make sure to select the appropriate organization and enter the user's email address.
As an example using "google.com," follow these steps:
Click on the login button on the Google.com page. Enter the user's email address to initiate the login process.
You will be redirected to the WiKey Login page. On the WiKey Login page, click on the 'Sign in with WebAuth.
You will be directed to the Sign in with passkey page. Continue the login by using your mobile device
You will be presented with a QR code. Continue the login by using the camera on your mobile device
In the SAML reply URL field, enter https://www.google.com/a/<your domain>/acs, which is the ACS URL. You can find relevant information about ACS URL here: .
Item 1,2 - Items 3 & 4 are identical and should be pasted from the sign-in page URL, which was copied in the WiKey admin page (see above)
