SAML configuration for GSuite (Google)

Follow these steps to configure Single Sign-On (SSO) to Canva via GSuite:

1. From your GSuite domain, visit the SAML apps tab. 
2. Click the + (plus) button to add a new SAML app. 
3. Select SETUP MY OWN CUSTOM APP.
4. Download the IDP metadata. Keep this file as you need to send it to Canva.
5. Enter a name (Canva) and optionally add a logo.
6. Enter the following fields:
   ACS URL: https://www.canva.com/login/saml
   Entity ID: https://www.canva.com
   Leave the other fields as defaults.
7. Check Signed Response.
8. Setup the Attribute Mappings.
9. Copy the following values from OneLogin to the text fields in the SAML Authentication section on your team’s Account settings:
   – Identity Provider Single Sign-On URL → SAML 2.0 Endpoint (HTTP)
   – Identity Provider Issuer → Identity Provider Issuer
   – X.509 Certificate → Public Certificate