# Google

* Open a session as an administrator on <https://admin.google.com>

* Click on « **Security** » (may be hidden under « Other commands »)

* Click on « **Setup Single Sign-On (SSO)** »

* Check « **Setup SSO with third party identity provider** »

* Enter the 3 following parameters:

  * Sign-in page URL:

  ```exp
  https://mydomain.trustelem.com/app/17XXX/sso
  ```

  * Sign-out page URL:

  ```exp
  https://mydomain.trustelem.com/app/17XXX/slo
  ```

  * Change password URL:

  ```exp
  https://mydomain.trustelem.com/#security
  ```

* Download the **security certificate** from Trustelem and upload it in the Google set up page

* Don't use a domain specific issuer

* Don't use a network mask, unless for testing