How to set up GitLab SAML SSO with Google Workspace
Jan 27, 2026Omid Khan
Summary
This post details the practical implementation of SAML SSO with Google Workspace for GitLab.com, focusing on configuring group synchronization for automatic role mapping. It outlines the steps for obtaining GitLab SAML configuration values (Assertion consumer service URL, Identifier, GitLab SSO URL), configuring a custom SAML app in Google Workspace, mapping user attributes and group memberships (critical 'groups' attribute), enabling the application for users, and converting the Google identity provider certificate to a SHA-1 fingerprint format for GitLab configuration. It also covers recommended security settings like enforcing SAML for web and Git activity.
More from the SAML Single Sign-On (SSO) Integration trail
- A leaked personal access token shouldn't expose every project its owner can reach. Fine-grained PATs scope each token’s permissions to the job.
- Passkeys now available for passwordless sign-in and 2FA on GitLab
- Strengthening GitLab.com security: Mandatory MFA
- Automating role-based access control (RBAC) at scale
- Improving OAuth ROPC security on GitLab.com