Proofsource and Google Workspace: your domain, one sign-in
Use Google Workspace as the identity provider for Proofsource. Everyone with an email on your domain signs in through your Workspace account instead of an email code, first-time people join the workspace automatically, and the admin who already runs your Workspace controls access from the Admin console they know.
Proofsource and Google Workspace SSO, in short
The facts, ready to quote.
- Stage
- Live: open to every workspace
- Connects with
- SAML 2.0 or OpenID Connect from the Google Workspace admin
- Who can set it up
- Workspace owners and admins, with a step-up confirmation on every change
- Provisioning
- SCIM 2.0 adds, updates and removes people
- Where it shows
- Settings, Single sign-on
- Disconnect
- Turn the connection off or remove it; people go back to email-code sign-in
Why we love Google Workspace SSO
In the makers' own words, from their own pages. Proofsource builds on it, never around it.
One console for the whole company
The Google Workspace Admin console gives IT one place to manage users, devices and apps across Workspace, Chrome and Android.
From workspace.google.comSecurity built into every account
Workspace protects data on any device with threat prevention, data controls and compliance features, so identity is strong before an app is even opened.
From workspace.google.comCustom SAML apps in minutes
Workspace admins can add their own SAML app for tools outside the preintegrated catalog, then switch it on for chosen teams.
From knowledge.workspace.google.comHow Proofsource uses Google Workspace SSO
Google Workspace as your identity provider: SAML or OIDC sign-in for your Proofsource team.
- Connect
Add your email domain
An owner or admin adds the company email domain in Settings, Single sign-on. Proofsource shows the Entity ID and ACS URL, or takes an issuer, client ID and secret for OpenID Connect.
- Read
Trust the identity provider
Proofsource trusts the SAML metadata or OpenID Connect settings from your Workspace admin and accepts only people whose email is on the verified domain.
- Show
One sign-in for the whole team
Once SSO is on, everyone with an email on the domain signs in through Google Workspace SSO instead of an email code, and first-time people join the workspace on the role you chose.
- Prove
Keep the roster current
Because sign-in runs through Workspace, turning a person off in the Admin console ends their access on the next sign-in, and Settings in Proofsource shows the connection status at a glance.
Set up Google Workspace SSO in 4 steps
Add your domain in Proofsource
Open Settings, Single sign-on, choose SAML 2.0 or OpenID Connect, enter your Workspace domain, and choose the role new people get.
Add a custom SAML app in the Admin console
Copy the Entity ID and ACS URL Proofsource shows into a custom SAML app in Google Admin. For OpenID Connect, create the OAuth client and note its issuer, client ID and secret.
Paste Google's metadata and save
Paste the IdP metadata URL or XML from Google into Proofsource and save. SSO turns on for the domain.
Turn the app on for your team
In Google Admin set the app to On for the organizational units who need Proofsource, then sign in once to check.
What you unlock with Google Workspace SSO
One sign-in
Your team signs in through your own identity provider instead of an email code.
Automatic joining
First-time people on your domain join the workspace on the role you picked, with nobody to invite.
Provisioning
SCIM 2.0 adds, updates and removes people, and removing someone signs them out everywhere.
Step-up on every change
Each SSO or SCIM change asks the person to confirm it is them first.
Group roles
Map identity provider groups to Admin, Member, Viewer, Client viewer or Product viewer.
Owner-only token
Only the workspace owner can create, replace or revoke the SCIM token.
Questions about Proofsource and Google Workspace SSO
What changes in Proofsource when I connect Google Workspace?
Everyone with an email on the verified domain signs in through Google Workspace instead of an email code, and first-time people join your workspace automatically on the role you chose, Member or Viewer. Nothing changes about your brands, scans or reports.
Who can set up single sign-on?
Only a workspace owner or admin can see and change it, and every change asks them to confirm it is really them. Members see a short explanation instead of an error.
What does Proofsource need from Google Workspace?
Proofsource needs the IdP metadata URL or XML from your Google Workspace admin, or the issuer, client ID and secret for OpenID Connect. Google passwords never reach Proofsource, and only an owner or admin can change the connection.
Is this the same as Sign in with Google?
No. Google sign-in lets one person use their own Google account. Google Workspace SSO is a per-organization connection run by your admin: everyone on your domain signs in through your Workspace, and first-time people join the workspace on the role you set.
How do I turn it off?
Open Settings, Single sign-on, and use Turn off to pause the connection or Remove to delete it. Your team goes back to signing in with an email code, and nobody loses their workspace or their history.
Is single sign-on available on every workspace?
Yes. Single sign-on is live and open to every workspace. An owner or admin turns it on in Settings, Single sign-on.
How does single sign-on help my AI visibility work?
It gets the right people into Proofsource without friction, so fixes get approved, shipped and verified faster across ChatGPT, Perplexity, Claude and the other engines. Roles keep approvers, writers and clients in the lanes you set.
Which AI engines does Proofsource check?
Up to 10 depending on your plan: ChatGPT, Perplexity, Claude, Google AI Overviews, Google AI Mode, Gemini, Microsoft Copilot, Grok, DeepSeek and Meta AI. The free scan and trial run four.
Pairs well with Google Workspace SSO
Put Google Workspace SSO to work for your AI visibility.
Scan your brand, connect Google Workspace SSO, and see what AI says about you on up to 10 engines.
