SAML: Google IDP Configuration

This document provides instructions for creating an application within Google for compatibility with BloodHound Enterprise.

For general instructions on adding a SAML provider to BloodHound Enterprise, or for configuring users to utilize a SAML provider, see SAML in BloodHound Enterprise.

See SAML Order of Operations and Quick Reference before starting.

Create a Google Application

1. On the Admin Console for Google Workspaces, use the left navigation bar and go to Apps -> Web and Mobile Apps

2. Select “Add App” -> Add Custom SAML app

3. Give the app an appropriate name, such as BloodHound Enterprise.

   Optionally, add an icon and description.

4. On the next screen, download the metadata file and continue.

5. Enter the ACS URL and Entity ID as provided in the BloodHound Enterprise console:

6. On the next screen, it is required to send the email attribute to BloodHound.

   BloodHound will accept either of the following values as the “App Attributes”:

   • http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

   • urn:oid:0.9.2342.19200300.100.1.3

7. Follow the instructions at SAML in BloodHound Enterprise to create the SAML provider in BloodHound Enterprise.