Log in to Digital Access Admin with an administrator account.

Go to Manage system > Certificates

Scroll down to Registered Server Certificates

Verify that the certificate to be used is available, for example: idp-cert.

Go to Manage Resource Access > SAML Federation.

Click Add SAML Federation...

Enter a Display Name, for example Google IDP.

Check Acting as Identity Provider.

Uncheck Import metadata automatically, since Google doesn’t use metadata as service provider.

Go to the Export tab.

Give a unique Entity ID: for example https://nexusville.com/cloudidp.

Select the Signing Certificate, for example idp-cert.

Go to the Role Identity Provider tab. 

Add a service provider, to tell Digital Access where the Google Service Provider is located:
Click Add Service Provider…

Verify that SAML 2.0 is checked. Click Next >

Do General Settings, for example enter a Display Name. The Entity ID must be unique within the federation. The Service Provider URL is where the IDP will redirect the user after successful authentication, so this must be an exact match with the google domain.

Click Next >

Set email as the unique identifier for the user, since that is what Google uses. This is used when Digital Access sends a SAML ticket to Google.
In Subject > Select source of subject: select E-mail. The Manage Access Rules window opens.

Select the already created access rule (for example called Google Apps), to define what authentication methods are allowed:
In Available Access Rules: select Google Apps, and click Add >

Click Finish Wizard to finish creating the Service Provider G Suite.

Click Add to add the SAML Federation Google IDP.