Amplitude provides a single sign-on integration with G Suite for customers on Scholarship, Growth, or Enterprise plans.

## Before you begin

For general information about SSO, refer to [SSO in Amplitude](/docs/admin/single-sign-on/sso).

To set up SSO, you must be an org admin for your Amplitude organization. You must also be an administrator for your G Suite organization, and you must configure your own SSO settings. Amplitude enforces this requirement when users log in to your org.

## Set up SSO for Amplitude using G Suite

To configure SSO for Amplitude using G Suite:

1. In the [G Suite admin console](https://admin.google.com/), navigate to _Apps_ and click the _SAML apps_ card.

2. Click the **_+_** button (in the bottom left corner) to add a SAML app.

3. In the modal, click _Setup my own custom app_.

4. Under Option 2, click _Download_ to download the IDP metadata.

5. Upload the metadata file in Amplitude, under _Settings > Organizational settings > Access & SSO Settings_, then save the changes.

6. Go back to G Suite and continue with the app creation process. Enter a name and description and optionally upload the logo for easy recognition.

7. Next, G Suite prompts you for the "ACS URL" and "Entity ID".

To find the Entity ID and Assertion Consumer Service URL in Amplitude, navigate to _Settings > Organizational settings > Access & SSO Settings_.

8. Finally, in Google Admin, click _Finish_ to save the app and enable SSO.

{% callout type="note" %}
Review [just-in-time (JIT) provisioning settings for G Suite administration](http://cloud.google.com/identity/solutions/automate-user-provisioning). There may be a short "settling period" when setting up and validating the configuration. If users get 403 errors, wait a day and try JIT again.
{% /callout %}