Configuring SSO with Google

1. Visit your Google Apps admin panel.
2. Click Apps, then SAML apps. 
3. Click the + button and enter the requested information.  
4. Select Setup my own custom app. 

1. Click Download (IDP metadata) under Option 2.
   1. The IDP metadata file includes a certificate that is necessary when submitting your IDP metadata using the admin panel.

1. Enter "Airtable" as the application name, and use the following logo:

1. Enter the "Service Provider Details":
   1. ACS URL: https://airtable.com/auth/ssoCallback
   2. Start URL: leave blank
   3. Signed Response: leave unchecked
   4. Name ID: Basic Information; Primary Email
   5. Name ID Format: Email

1. Enter the following "Attribute Mapping" information:
   1. "urn:oid:2.5.4.4" -> Basic Information; Last Name
   2. "urn:oid:2.5.4.42" -> Basic Information; First Name

1. Submit your signin URL and x509 certificate, following the steps in Configuring SSO in the admin panel article.
   1. After completing the above steps, you should be able to log in from https://airtable.com/sso/login.

In Airtable, our system expects Enterprise Scale accounts using shared domains—domains federated to multiple Enterprise accounts—to use the same SAML metadata for SSO. What this means is that if your company has existing Enterprise ScALE accounts with SSO configured, you will need to coordinate with the admins (or IT department) of the other accounts to obtain the current sign-in URLs, x.509 certificates, and ensure that your users have the necessary access to the Airtable tenant present in your company’s identity provider.

You can configure separate tenants or identity providers for domains unique to Enterprise Scale accounts, as each account can be configured with its own SAML metadata.