What Is SAML?
SAML is the security standard that lets your team sign in to Taskade with the credentials they already use in Google Workspace. They need no separate Taskade password. Identity, deprovisioning, and audit trails stay inside your Google admin console. This guide walks through the full Google Workspace and Taskade configuration in roughly 10 minutes.
TL;DR: In Google Workspace, create a custom SAML app pointed at
https://www.taskade.com/saml/sso/login/callback(Entity IDhttps://www.taskade.com/saml/sso/metadata). Copy the SSO URL, IdP Issuer, and signing certificate. Paste them into Taskade's Settings → Organization → SAML SSO along with your verified company domain. Available on Business, Max, and Enterprise plans, alongside SCIM provisioning for automated accounts.
💡 Note: If your team already uses Taskade, your identity provider takes ownership of those accounts. Tell your team before you enable SAML.
Configure Google Workspace
Requirements
The main account must be set up with a company email address.
Personal email accounts are not allowed.
Your email must be verified.
This feature is available on Business, Max, and Enterprise plans.
💡 Already on Business? SAML single sign-on is included on Business, Max, and Enterprise. Set it up from Settings → Organization → SAML SSO with the Google Workspace values below. Business also puts your published Taskade Genesis apps on Custom Domains. Their built-in GenesisAuth sign-in works on every plan. See the Plan Matrix to compare tiers.
Google Workspace Setup
Go to the Google Workspace admin dashboard. In the sidebar, select "Web and mobile apps" under Apps. Click "Add app", then "Add custom SAML app".
Enter "Taskade" under App name and upload a logo (optional).
Click "Next" to continue.
Save the SSO URL, Entity ID, and Certificate to a file. You need this information for the Taskade setup. Click "Continue".
On the next screen, enter the following information:
- ACS URL: https://www.taskade.com/saml/sso/login/callback
- Entity ID: https://www.taskade.com/saml/sso/metadata
- Name ID Format: Email
- Name ID: "Basic Information Primary email"
Click "Continue".
Under "Google Directory attributes", select "Primary email" and "email" for "App attributes".
Click the arrow in the "User access" section to open a drop-down menu.
Choose "ON for everyone" in your Google Workspace Dashboard to enable SSO for all users. Click "Save".
That completes the Google Workspace setup. Now finish in Taskade.
Taskade Setup
💡 Note: Read the requirements before you follow these steps.
- Visit https://taskade.com/settings and open the Organization tab.
- On the security screen, paste the Google Workspace values you saved earlier:
- Domain: Enter your domain, for example company.com, without "https://" or "www."
- SSO URL: Paste the "SSO URL" from earlier.
- IDP ISSUER: Paste the "Entity ID" from earlier.
- IDP PUBLIC SIGNING CERT: Paste the "Certificate" from earlier.
Anyone with an email address in your domain can now go to https://taskade.com/login and choose Sign In with Single Sign-On to sign in with their Google Workspace credentials.
Related guides
- SAML via Okta. SSO setup with Okta as identity provider
- SAML via Azure AD. SSO setup with Microsoft Entra / Azure AD
- SCIM via Okta. Automated user provisioning
- Two-Factor Authentication. Add a second sign-in step on top of SSO
- Workspace Privacy. Control who sees what after sign-in