---
title: "Configure Google SSO"
slug: "how-to-configure-sso-in-google"
updated: 2026-09-15T14:12:35Z
published: 2026-09-15T14:12:35Z
canonical: "docs.revealdata.com/how-to-configure-sso-in-google"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.revealdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Google SSO

Single Sign-On (SSO) allows users to access multiple applications with a single set of credentials, improving security and simplifying login management. This guide walks you through configuring SSO in Google, including setup steps for both U.S. and EU Logikcull instances.

## Step 01: Open Google Admin Console

In the Admin console, navigate to **Apps**. Click **SAML apps**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-HADQOKZY.png)

In the bottom-right corner, click the **+** icon to add a new SAML app. Then select **Setup My Own Custom App**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-K3ONBQFR.png)

## Step 02: Download SSO Information

Copy the **SSO URL** provided. Click **Download Certificate** (this file will be required later in Logikcull).

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-5TFM08GV.png)

To continue click **Next**.

## Step 04: Configure ACS URL and Entity ID

Enter your URLs and entity IDs while replacing **[CONNECTION ID]** with your ID provided by the Logikcull team. For example, a U.S. instance with the ID **12345** would have a URL of https://login.logikcull.com/login/callback?connection=**12345**

1. Under **ACS URL** enter:
  1. For U.S. instances: `https://login.logikcull.com/login/callback?connection=[CONNECTION ID]`
  2. For EU instances: `https://eu-central-1.logikcull.com/login/callback?connection=[CONNECTION ID]`

1. Under **Entity ID** enter:
  1. For U.S. instances: `urn:auth0:logikcull:[CONNECTION ID]`
  2. For EU instances: `urn:auth0:logikcull-prod-eu-central-1:[CONNECTION ID]`
2. Leave the **Start URL** blank
3. Check the **Signed Response** box
4. Under **Name ID** select **Basic Information and Primary Email**
5. Under **Name ID Format** select **X509_Subject**
6. Click **Next** to continue.

## Step 05: Attribute Mapping

Complete the **Attribute Mapping** as shown below:

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-BDV1ZFJY.png)

Click **FINISH** to finalize.

## Important Notes

> [!NOTE]
> **Note**
> 
> Domain user - a domain user is a user with a username/email that is managed through your company domain. e.g. if your company “Example” uses the email domain “example.com”, then “jane.doe@example.com” would be a domain user.

1. New domain users must be assigned to the Logikcull app in Google and added to your Logikcull account in the Logikcull (https://app.logikcull.com)
2. All domain users will be required to login through SSO and therefore must be authorized Logikcull users in your IdP.
3. If you invite users to your Logikcull account that are not domain users, such as external counsel, they will log into Logikcull directly using a username and password.
4. If you have enforced 2FA on your Logikcull account, which is recommended, all users will be required to enter a second factor regardless of login method.