GSuite (Google) SAML configuration (For Enterprise)

Set up Single Sign-On (SSO) for your organization using GSuite (Google).

1. From your Google Admin console, go to Apps > Web and mobile apps.
2. Click Add App, then Search for apps.
3. In the search field, type Canva. Select Canva Web (SAML) app.
4. On the Google Identity Provider details page, copy or note the SSO URL and Entity ID. You’ll need them in a later step. Make sure the Signed response box is checked.

5. On the same page, download the Certificate, then click Continue.
6. In the Service Provider Details window, leave most settings on the page as they are. More on this on the note below. Click Continue.
7. In the Attributes section, make sure the fields look like below, and click Finish.

Service Provider Details NameId: We recommend sending a Custom Attribute with a non-email unique identifier. If you don’t have one, you can use Primary email, but this could make it more challenging for Canva to automatically update email addresses when your users change email addresses, or if your institution changes its email domain.

To avoid issues, don’t use First Name or Last Name for NameId.

1. Log in to your Canva account.
2. On the upper corner of the homepage, select your account profile to open menu.
3. click the
   gear icon and choose Settings.
4. From the side menu, click the
   SSO and provisioning tab.
5. Under Domain verification, enter your team’s domain.
6. Click Submit domain. You will then be provided with a DNS token.
7. Create a TXT record of the DNS token using your domain host. Help from your IT team might be needed for this step.

Learn more about adding a TXT record in our Setting up Single Sign-on (SSO) article.

1. Log in to your Canva account.
2. On the homepage, select your account profile to open menu.
3. Choose Settings.
4. From the side menu, click the
   SSO and provisioning tab.
5. Click Single sign-on (SSO) > Manage > Edit IdP metadata.
6. Enter your identity provider’s details in the three fields:
   • SSO or login URL: Paste your SSO URL. 
   • Entity ID or Issuer ID: Paste your Entity ID.
   • X.509 Public Certificate: Paste all of the contents from your Certificate. 
7. Click Save and next.

There are two easy ways to test your SSO setup:

Option 1: Use the Test SSo button

If you’re still on the Set up SSO page, scroll to the Test your SSO connection section and click Test SSO. If you're starting from the Canva homepage instead:

1. On the homepage, select your account profile to open menu,
2. Choose Settings.
3. From the side menu, click the SSO and provisioning tab.
4. Under Single sign-on (SSO) > Manage > Test SSO.

This lets you quickly check if everything’s working without logging out.

Option 2: Log out and back in using SSO

1. Before logging out, go to the SSO and provisioning tab.
2. Click Single sign-on (SSO) > Manage > Configure SSO settings.
3. Set the login option to Optional for everyone.
4. Log out of your Canva account.
5. On the login page, click Continue with email, then select Log in with SSO.

If you’re taken to your team’s page after logging in, you successfully set up SSO! If you get an error, check our Troubleshooting SSO errors article for help.

Quick tip: Using both methods can give you extra peace of mind that everything’s set up right.

Choose how you want people to log in to your SSO-managed team(s).

1. From the homepage, select your account profile to open menu, 
2. Choose Settings > SSO and provisioning.
3. Click Single sign-on (SSO) > Manage > Configure SSO settings.
4. Select one of the login options. Learn more about each option in Setting up login and signup controls. 
5. Click Save changes.