> ## Documentation Index
> Fetch the complete documentation index at: https://specterops-bed-7559-api-key-exp.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# SAML: Google IDP Configuration

> This document provides instructions for creating an application within Google for compatibility with BloodHound Enterprise.

export const IDPIntro = ({auth_mode}) => {
  const mode = (auth_mode || '').toUpperCase();
  const isOIDC = mode === 'OIDC';
  const href = isOIDC ? '/manage-bloodhound/auth/oidc' : '/manage-bloodhound/auth/saml';
  const label = isOIDC ? 'OIDC' : 'SAML';
  return <Tip>
      See <a href={href}>{label} in BloodHound</a> for order of operations, general {label} setup, and user configuration in BloodHound.
    </Tip>;
};

<img noZoom src="https://mintcdn.com/specterops-bed-7559-api-key-exp/Q9Jppg_Pu54SydxZ/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=Q9Jppg_Pu54SydxZ&q=85&s=dab889e863a05e09b1378befc30bbb10" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

<IDPIntro auth_mode="SAML" />

## Create a Google Application

1. On the Admin Console for Google Workspaces, use the left navigation bar and go to Apps -> Web and Mobile Apps

<Frame>
  <img src="https://mintcdn.com/specterops-bed-7559-api-key-exp/822eouQ8h3kcvEH5/assets/image-2-58.png?fit=max&auto=format&n=822eouQ8h3kcvEH5&q=85&s=deaeb3ae5171f32eef26335000dfaee2" width="436" height="359" data-path="assets/image-2-58.png" />
</Frame>

2. Select “Add App” -> Add Custom SAML app

<Frame>
  <img src="https://mintcdn.com/specterops-bed-7559-api-key-exp/822eouQ8h3kcvEH5/assets/image-2-59.png?fit=max&auto=format&n=822eouQ8h3kcvEH5&q=85&s=08555371752e9cfb98a606a357abebbf" width="541" height="331" data-path="assets/image-2-59.png" />
</Frame>

3. Give the app an appropriate name, such as BloodHound Enterprise.

   Optionally, add an icon and description.

<Frame>
  <img src="https://mintcdn.com/specterops-bed-7559-api-key-exp/822eouQ8h3kcvEH5/assets/image-2-60.png?fit=max&auto=format&n=822eouQ8h3kcvEH5&q=85&s=af077b307b62e47be3619a0382eb60e7" width="624" height="418" data-path="assets/image-2-60.png" />
</Frame>

4. On the next screen, download the metadata file and continue.

5. Enter the ACS URL and Entity ID as provided in the BloodHound Enterprise console:

<Frame>
  <img src="https://mintcdn.com/specterops-bed-7559-api-key-exp/822eouQ8h3kcvEH5/assets/image-2-61.png?fit=max&auto=format&n=822eouQ8h3kcvEH5&q=85&s=6aaf5333005b547f5c050ca176827f87" width="624" height="429" data-path="assets/image-2-61.png" />
</Frame>

6. On the next screen, it is required to send the email attribute to BloodHound.

   BloodHound will accept either of the following values as the “App Attributes”:

   * [http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress](http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress)

   * urn:oid:0.9.2342.19200300.100.1.3

<Frame>
  <img src="https://mintcdn.com/specterops-bed-7559-api-key-exp/822eouQ8h3kcvEH5/assets/image-2-62.png?fit=max&auto=format&n=822eouQ8h3kcvEH5&q=85&s=4c3474045408ed01dee312897a0a06f3" width="624" height="375" data-path="assets/image-2-62.png" />
</Frame>

7. Follow the instructions at [SAML in BloodHound Enterprise](/manage-bloodhound/auth/saml) to create the SAML provider in BloodHound Enterprise.