SAML: Google IDP Configuration

This document provides instructions for creating an application within Google for compatibility with BloodHound Enterprise.

See SAML in BloodHound for order of operations, general SAML setup, and user configuration in BloodHound.

Create a Google Application

1. On the Admin Console for Google Workspaces, use the left navigation bar and go to Apps -> Web and Mobile Apps

2. Select “Add App” -> Add Custom SAML app

3. Give the app an appropriate name, such as BloodHound Enterprise.

   Optionally, add an icon and description.

4. On the next screen, download the metadata file and continue.

5. Enter the ACS URL and Entity ID as provided in the BloodHound Enterprise console:

6. On the next screen, it is required to send the email attribute to BloodHound.

   BloodHound will accept either of the following values as the “App Attributes”:

   • http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

   • urn:oid:0.9.2342.19200300.100.1.3

7. Follow the instructions at SAML in BloodHound Enterprise to create the SAML provider in BloodHound Enterprise.