Set up SSO with Google

Requirements
- Google super administrator account with permissions to manage SAML
- Grammarly Business, Grammarly Pro, or a Grammarly for Education account with the admin role or a designated custom role

1. Log in to your Google Admin console.
2. Go to Apps -> Web and mobile apps.
3. Click Add App -> Add custom SAML app.
4. On the App Details page:
   1. Enter the application name (Grammarly). 
   2. Upload a logo (you can download the Grammarly logo here).
   3. Click Continue.
5. On the Google Identity Provider details page, copy the SSO URL and Entity ID and download the Certificate. You will need these values later to activate SSO in the Grammarly administrator interface. Click Continue.
6. In the Service Provider Details window, enter the following details:
   • ACS URL: https://sso.grammarly.com/saml/assertion
   • Entity ID: https://sso.grammarly.com/saml/metadata
   • Name ID: Primary Email
   • Name ID Format: EMAIL 
7.  Next, go to the Attribute mapping page, click Add mapping, and enter the following:
   • Basic Information: Primary email → EmailAddress
   • Basic Information: First name → FirstName
   • Basic Information: Last name → LastName
     
8. Optionally, if you’d like to assign users to pre-determined groups in Grammarly, you can add the GrammarlyGroup attribute in the Group membership (optional) section.
9. Click Save to complete this part of the setup process.
10. In the User access tab, click OFF for everyone. Here, you can grant access to different user groups or organizational units in your company. First, for the successful SSO setup, we recommend assigning the user access to the specific Group within the organization that includes the administrator account. After the SSO is successfully activated in the Grammarly interface, you can switch this setting to Turn ON for everyone or keep using the user groups. For more information on user groups, please see this guide from Google.
11. Once you have assigned access to all relevant users, return to the application page and click Download Metadata.

To finish the setup, you will need to provide the following values to Grammarly to enable SSO for your team (see step 5 above):

• SSO URL (SAML 2.0 Endpoint (HTTP))
• Entity ID (Identity Provider Issuer)
• Certificate

For more information on how to do this, please see step 2 in this article: Set up SAML single sign-on

If you encounter any issues, please look for a troubleshooting article on this page: Resolve Issues 

Note: With Google, changes typically take effect within minutes but can also take up to 24 hours.