In order to configure Google SSO:

1. Sign in to the Google admin panel.

2. Choose "Apps" from the left menu.

3. Choose "Web and mobile apps".

4. Click the "Add App" dropdown button and then choose "Add custom SAML app".

5. Enter the name "Torii" when asked for the app name

6. Download and save the "IDP metadata" XML file by clicking the "Download metadata" button.

7. Click "Continue" and configure the following:
   - ACS URL: https://api.toriihq.com/api/saml/ORG_ID/callback
   - Entity ID: https://api.toriihq.com/api/saml/ORG_ID/callback
   - Check the "Signed response" checkbox
   - No need to change anything else
   
   (replace ORG_ID with your Organization ID. What is my Organization ID?)

8. Click "Continue".

9. Click "Finish".

10. Enable the new app for the employees you want from the "User access" section (you can turn it on for everyone or specific users).

11. Continue from step 2 in Setup your Torii account to use SSO while using the file you saved in step 6