Set up single sign-on (SSO) for Amplitude using G Suite

Amplitude provides a single sign-on integration with G Suite for customers on the Startups, Growth, or Enterprise plans.

Before you begin

For general information about SSO, refer to SSO in Amplitude.

To set up SSO, you must be an org admin for your Amplitude organization. You must also be an administrator for your G Suite organization, and you must configure your own SSO settings. Amplitude enforces this requirement when users log in to your org.

Set up SSO for Amplitude using G Suite

To configure SSO for Amplitude using G Suite:

  1. In the G Suite admin console, navigate to Apps and click the SAML apps card.

  2. Click the + button (in the bottom left corner) to add a SAML app.

  3. In the modal, click Setup my own custom app.

  4. Under Option 2, click Download to download the IDP metadata.

  5. Upload the metadata file in Amplitude, under Settings > Organizational settings > Access & SSO Settings, then save the changes.

  6. Go back to G Suite and continue with the app creation process. Enter a name and description and optionally upload the logo for easy recognition.

  7. Next, G Suite prompts you for the "ACS URL" and "Entity ID".

To find the Entity ID and Assertion Consumer Service URL in Amplitude, navigate to Settings > Organizational settings > Access & SSO Settings.

  1. Finally, in Google Admin, click Finish to save the app and enable SSO.

Review just-in-time (JIT) provisioning settings for G Suite administration. There may be a short "settling period" when setting up and validating the configuration. If users get 403 errors, wait a day and try JIT again.

Troubleshoot a 403 error

After you configure SSO through Google Workspace, users might see 403 Error: app_not_enabled_for_user or 403 Error: app_not_configured_for_user when they sign in. Both mean Google hasn't enabled the Amplitude SAML app for that user's organizational unit.

To resolve the error, follow Google Workspace Admin Help to turn the app on for the affected users.

If the error persists after you enable the app, wait a day and try again — Google's just-in-time provisioning has a short settling period. If it still fails, contact Amplitude Support and include the browser and version number the user is signing in with.

Was this helpful?

For AI agents: a documentation index is available at /docs/llms.txt. Append .md to any page URL for markdown, or send Accept: text/markdown.

On this page