Skip to content
Tallyfy

Integrate Google Workspace

Google Workspace SAML/SSO integration

Connect Google Workspace (formerly G Suite) with Tallyfy using SAML-based Single Sign-On. Your users authenticate with their Google credentials - no separate Tallyfy passwords needed.

Requirements

  • Google Workspace admin account with super-administrator privileges
  • Tallyfy Pro or Enterprise plan
  • SAML configuration values from Tallyfy Support

Phase 1 - Create a custom SAML app in Google Workspace

Step 1: Create a custom SAML application

  1. Sign in to the Google Workspace Admin console ↗

  2. Go to Apps > Web and mobile apps

  3. Click Add App > Add custom SAML app

    Add custom SAML application

Step 2: Configure basic app settings

  1. Enter “Tallyfy” as the application name
  2. Optionally upload the Tallyfy logo
  3. Click Continue

Step 3: Collect Google Identity Provider details

  1. On the Google Identity Provider details page, copy the SSO URL (Single Sign-On URL).

  2. Copy the Entity ID (Issuer).

  3. Download the Certificate file.

    Google Identity Provider Details

Step 4: Configure Service Provider details

  1. Enter the Tallyfy ACS URL (Assertion Consumer Service URL) provided by Tallyfy Support.

  2. Enter the Tallyfy Entity ID (Service Provider Entity ID) provided by Tallyfy Support.

  3. Leave the Start URL field empty.

    Service Provider Configuration

Step 5: Configure attribute mapping

Map these user attributes exactly as shown:

Google Directory AttributeApp Attribute
Primary Emailemail
First NameFirstName
Last NameLastName

Click Finish. That’s it for the Google side.

Step 6: Enable user access

  1. In the application settings, go to User Access

  2. Set Service status to ON for everyone (or pick specific organizational units)

    Enable User Access

Phase 2 - Send your SAML details to Tallyfy

  1. Send the collected SSO URL to Tallyfy Support.
  2. Send the collected Entity ID to Tallyfy Support.
  3. Send the downloaded Certificate file to Tallyfy Support.

Phase 3 - Complete the integration in Tallyfy

Step 1: Configure SAML settings in Tallyfy

  1. Once Tallyfy Support processes your information, go to your organization settings

  2. Find the SAML configuration section

  3. Enter the configuration details Tallyfy Support provides

    Tallyfy SAML Configuration

Step 2: Enable SAML authentication

  1. Toggle the SAML activation switch to turn on SSO for your organization

    Enable SAML

User provisioning and access

After you finish the integration:

  1. Share the Tallyfy login URL with your users (you’ll find it in the SAML configuration modal).

    Tallyfy Login URL

  2. Confirm users who need access have been granted access to the SAML app in Google Workspace.

  3. Existing Tallyfy users sign in through the shared SSO URL - no separate passwords required.

  4. New users are automatically provisioned in Tallyfy on their first SSO login.

How the authentication flow works

Here’s the full SAML authentication flow after configuration is done.

Diagram

Key points:

  • Automatic provisioning - New users are created on first login (step 9a). No manual account setup needed.
  • Attribute mapping - The email, FirstName, and LastName attributes from step 7 control how accounts are created and matched.
  • Single authentication point - Users only authenticate with Google (steps 4-5), never entering Tallyfy passwords.

Troubleshooting

Running into authentication problems? Check these:

  • Has the user been granted access to the SAML app in Google Workspace?
  • Are the attribute mappings correct? Double-check the table above - case matters.
  • Is the user accessing Tallyfy through the right SSO URL?
  • Still stuck? Contact Tallyfy Support.

Authentication > Integrate OneLogin SSO

Set up OneLogin SAML/SSO with Tallyfy to let your team sign in with OneLogin credentials - covers creating a SAML connector, mapping attributes, and exchanging metadata with Tallyfy Support.

Authentication > Integrate Okta SSO

Set up Okta SAML/SSO with Tallyfy for single sign-on and automatic user provisioning by creating a SAML app in Okta and exchanging config with Tallyfy Support.

Integrations > Authentication and SSO

Tallyfy offers free SSO for paid plans - connect to Microsoft Entra ID, Google Workspace, Okta, OneLogin or JumpCloud with SSO-only enforcement and automatic account provisioning on first login.
Get in touch
About Tallyfy