Configure your Google Single-Sign-On account in order to allow signups and logins to Torii.

In order to configure Google SSO:

1. Sign in to the Google admin panel.
2. Choose "Apps" from the left menu.
3. Choose "Web and mobile apps".
4. Click the "Add App" dropdown button and then choose "Add custom SAML app".
5. Enter the name "Torii" when asked for the app name
6. Download and save the "IDP metadata" XML file by clicking the "Download metadata" button.
7. Click "Continue" and configure the following:
   - ACS URL: https://api.toriihq.com/api/saml/ORG_ID/callback
   - Entity ID: https://api.toriihq.com/api/saml/ORG_ID/callback
   - Check the "Signed response" checkbox
   - No need to change anything else
   (replace ORG_ID with your Organization ID. What is my Organization ID?)
8. Click "Continue."
9. Click "Finish."
10. In order for non-Torii users to use the App Catalog, Under the User access section >> click on View details >> Change it to "ON for everyone."
    
11. Continue from Step 2 in Setup your Torii account to use SSO while using the file you saved in Step 6

Enforce users to sign in using SSO

After you validated that your SSO configuration is in place and working as expected, you can go ahead and enforce all your users to login only via SSO - this is easier for them and better for the organization's security.

Go to the Settings -> Security page and change the state of the 'Enforce users to sign in using SSO' switch to On.