Set up SAML single sign-on so your team logs in to Taskade with their Google Workspace accounts. The setup takes about 10 minutes, in Google first and then in Taskade.
TL;DR: In Google Workspace, add a custom SAML app with ACS URL
https://www.taskade.com/saml/sso/login/callbackand Entity IDhttps://www.taskade.com/saml/sso/metadata. Copy the SSO URL, Entity ID, and certificate into Settings → Organization → SAML SSO in Taskade. SAML is on Business, Max, and Enterprise. Enterprise adds SCIM provisioning.
In this guide, you will:
- Add Taskade as a custom SAML app in Google Workspace
- Connect Google to your Taskade organization
- Let your team log in with single sign-on
What Is SAML?
SAML is the security standard that lets your team sign in to Taskade with their Google Workspace credentials. They need no separate Taskade password. Identity, deprovisioning, and audit trails stay in your Google admin console.
Before You Start
You need admin access in Google Workspace and a Taskade plan that includes SAML.
| Requirement | Details |
|---|---|
| Plan | Business, Max, or Enterprise |
| Your Taskade account | Uses your company email address, not a personal one, and the email address is verified |
| Google access | You can add apps in the Google Workspace admin console |
| Time | About 10 minutes |
Important: If your team already uses Taskade, your identity provider takes ownership of those accounts. Tell your team before you turn on SAML.
Step 1: Add a Custom SAML App in Google Workspace
Google needs an app entry for Taskade.
- Open the Google Workspace admin console.
- In the sidebar, go to Apps, then Web and mobile apps.
- Click Add app, then Add custom SAML app.
- Type "Taskade" as the App name. You can also upload a logo.
- Click Next.
Step 2: Save the Google Sign-In Values
Google shows three values that Taskade needs in Step 5.
- Copy the SSO URL, the Entity ID, and the Certificate into a file.
- Click Continue.
Step 3: Enter the Taskade Details in Google
Google asks for the Taskade details next.
| Field | Value |
|---|---|
| ACS URL | https://www.taskade.com/saml/sso/login/callback |
| Entity ID | https://www.taskade.com/saml/sso/metadata |
| Name ID Format | |
| Name ID | Basic Information, Primary email |
- Type each value from the table.
- Click Continue.
- Under Google Directory attributes, select Primary email. Type
emailas the App attribute.
Step 4: Turn the App On for Your Users
The app must be on for the people who log in to Taskade.
- Click the arrow in the User access section.
- Choose ON for everyone.
- Click Save.
The Google Workspace part is complete. Finish in Taskade.
Step 5: Paste the Values Into Taskade
The SAML SSO form in Taskade takes the values from Step 2.
| Taskade field | What to paste |
|---|---|
| Domain | Your company domain, for example company.com, without https:// or www. |
| SSO URL | The SSO URL from Step 2 |
| IDP Issuer | The Entity ID from Step 2 |
| IDP Public Signing Cert | The Certificate from Step 2 |
- Go to taskade.com/settings and open Organization, then SAML SSO.
- Type each value from the table.
- Under Default Workspace, select the workspace that people sign in to. It must be on the Business plan or above and owned by you.
- Click Configure.
┌──────────────────────────────────────────────────────────┐
│ SAML │
│ Configure single sign-on using SAML identity providers │
│ (Okta, Google Workspace, OneLogin, Auth0). │
│ Domain [ company.com ] │
│ SSO URL [ ] │
│ IDP Issuer [ ] │
│ IDP Public Signing Cert [ ] │
│ Default Workspace [x] Your workspace │
│ [ Configure ] │
└──────────────────────────────────────────────────────────┘
You cannot change the default workspace after you configure it. To change it later, contact support@taskade.com.
You Are Done When
A teammate goes to taskade.com/login, clicks Log in with Single Sign-On, signs in with Google, and lands in your workspace. A new teammate can also start at taskade.com/signup. There, Sign up with Single Sign-On is a text link under the Google and Apple buttons.
Troubleshooting
Find what you see in the left column, then do the fix.
| What you see | Why | Fix |
|---|---|---|
| No workspace to pick under Default Workspace | You do not own a workspace on Business or above | Upgrade a workspace that you own, then open the form again. |
| Log in with Single Sign-On does not accept an email | The email domain does not match the Domain field | Type the domain exactly as company.com, with no https:// or www.. |
| Google refuses the sign-in | The Taskade app is off for that person | In Google, set User access to ON for everyone. |
Frequently Asked Questions
Which Taskade plans include SAML single sign-on?
Business, Max, and Enterprise. Enterprise also adds SCIM provisioning, which creates and removes accounts from your directory.
Does SAML change sign-in for my published apps?
No. SAML controls how your team logs in to Taskade. Sign-in for the visitors of your published Taskade Genesis apps works on every plan, and a custom domain for an app needs Business or above.
Can I change the default workspace later?
Not from the form. Contact support@taskade.com to change it.
Next Steps
Add automatic accounts and more protection on top of single sign-on.
- Compare plans: See what each tier includes in the Plan Matrix.
- Provision accounts: Automate joiners and leavers with SCIM via Okta.
- Use another provider: See SAML via Okta or SAML via Azure AD.
- Add a second step: Turn on Two-Factor Authentication.
- Control access after sign-in: See Workspace Privacy.