Single-sign on with custom OpenID Connect profiles now generally available

November 18, 2025

Single-sign on with custom OpenID Connect profiles now generally available

What’s changing
Single-sign on with custom OpenID Connect profiles is now generally available. With this capability, admins have the option to set up a custom OpenID Connect (OIDC) profile for single sign-on (SSO) with Google as their service provider.

OIDC is a modern authentication layer built on top of the OAuth 2.0 protocol and verifies a user's identity without exposing their password to the applications they are accessing. OIDC enables secure, seamless authentication across various platforms, including web, mobile, and cloud environments. With this update, admins have more secure options to configure SSO for their organizations. Previously, only OIDC with pre-configured Microsoft Entra ID profile was supported in addition to SAML.

Getting started

• Admins: This feature will be OFF by default and SSO profiles can be assigned to user groups or organizational units. Visit the Help Center to learn more about SSO and configuring custom OIDC profiles for SSO via a third party identity provider.
• End users: There is no end user setting for this feature.

Rollout pace
This feature is available now.

Availability

• Available for all Google Workspace customers except Essentials Starter customers and Workspace Individual subscribers
• Also available for Cloud Identity and Cloud Identity Premium customers