Identity Provider

Google Workspace Integration

Enable your Google Workspace users to sign in to your Shopify store using their Google corporate credentials with SAML 2.0.

10 min setup
SAML 2.0

Prerequisites

  • Google Workspace Super Admin access
  • SecurePie Professional or Enterprise plan
  • Your SecurePie Organization ID (found in Settings)

Setup Instructions

1

Access Google Admin Console

Log in to your Google Admin Console at admin.google.com. You'll need Super Admin privileges to configure SAML applications.

  1. 1.Navigate to admin.google.com
  2. 2.Sign in with your admin account
  3. 3.Click on "Apps" in the left sidebar
  4. 4.Select "Web and mobile apps"
2

Add a New SAML Application

Create a new custom SAML application for SecurePie.

  1. 1.Click "Add app" → "Add custom SAML app"
  2. 2.Enter "SecurePie SSO" as the app name
  3. 3.Optionally upload the SecurePie logo
  4. 4.Click "Continue"
3

Download Google IdP Metadata

Download the IdP metadata from Google to configure in SecurePie.

  1. 1.On the "Google Identity Provider details" page, click "Download Metadata"
  2. 2.Save the metadata XML file
  3. 3.Also copy the SSO URL and Entity ID for reference
  4. 4.Download the Certificate (you'll need this later)
Configuration
// Save these values from Google:
{
  "ssoUrl": "https://accounts.google.com/o/saml2/idp?idpid=xxx",
  "entityId": "https://accounts.google.com/o/saml2?idpid=xxx",
  "certificate": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----"
}
4

Configure Service Provider Details

Enter the SecurePie SAML configuration details in Google.

  1. 1.Set ACS URL to: https://securepie.com/saml/acs/YOUR_ORG_ID
  2. 2.Set Entity ID to: https://securepie.com/saml/YOUR_ORG_ID
  3. 3.Set Start URL to: https://YOUR_STORE.myshopify.com
  4. 4.Set Name ID format to: EMAIL
  5. 5.Set Name ID to: Basic Information > Primary email
Configuration
// SecurePie Service Provider Configuration
{
  "acsUrl": "https://securepie.com/saml/acs/your-org-id",
  "entityId": "https://securepie.com/saml/your-org-id",
  "startUrl": "https://your-store.myshopify.com",
  "nameIdFormat": "EMAIL"
}
5

Configure Attribute Mapping

Map Google user attributes to SecurePie fields.

  1. 1.Click "Add mapping"
  2. 2.Map "Primary email" to "email"
  3. 3.Map "First name" to "firstName"
  4. 4.Map "Last name" to "lastName"
  5. 5.Optionally map "Department" to "department"
Configuration
// Attribute Mapping
Google Attribute    →    SecurePie Attribute
─────────────────────────────────────────────
Primary email       →    email
First name          →    firstName
Last name           →    lastName
Department          →    department (optional)
Phone number        →    phone (optional)
6

Enable the Application

Turn on the SecurePie SAML app for your users.

  1. 1.Go back to the app settings
  2. 2.Click on "User access"
  3. 3.Select "ON for everyone" or choose specific organizational units
  4. 4.Click "Save"
7

Configure SecurePie

Upload the Google metadata to SecurePie to complete the integration.

  1. 1.Log in to your SecurePie dashboard
  2. 2.Go to Settings → Identity Providers
  3. 3.Click "Add Provider" → "Google Workspace"
  4. 4.Upload the metadata XML file you downloaded
  5. 5.Or manually enter the SSO URL, Entity ID, and Certificate
  6. 6.Click "Save" and then "Test Connection"

Testing Your Integration

  1. 1

    Use the Test Connection button

    In SecurePie dashboard, click "Test Connection" after saving your configuration.

  2. 2

    Sign in with a test user

    Use a Google Workspace account that has access to the SecurePie SAML app.

  3. 3

    Verify user attributes

    Check that the user's name, email, and other attributes are correctly populated.

Common Issues

Error: Invalid SAML Response

Ensure the ACS URL in Google exactly matches the URL in your SecurePie settings. Check for trailing slashes or protocol mismatches (http vs https).

Users not seeing the app

Verify that you've enabled the app for the correct organizational units in Google Admin Console. Changes can take up to 24 hours to propagate.

Certificate errors

Make sure you've uploaded the complete certificate including the BEGIN and END markers. Also check if the certificate has expired in Google Admin Console.

Need Help?

Our support team is available to help you with your Google Workspace integration.

Contact SupportBack to Docs