Step 3 of 4

Activate your tenant

Once you've finished the Google admin setup, paste your tenant key and the values Google generated for you. Activation is instant — your pilot users can sign in with biometric the moment you save.

Authenticate

Paste the tenant key from the signup confirmation.

Tenant API key*

Google profile

From admin.google.com → Security → Authentication → SSO with third-party IdP → your profile → Service Provider details.

ACS URL*

Paste this first — we'll auto-fill the profile ID from it.

Profile ID*

Audience

Optional. Defaults to https://accounts.google.com/samlrp/<profile_id> if blank.

User mapping

Map each pilot user's Google email to their Wink identity (email or winktag). For users whose handle matches on both sides, you can omit them — our happy-path fallback handles those automatically.

Google email

→

Wink identity

What you need before starting

Your tenant key from the signup step (starts with wkey_).
The Google SAML profile ID for the SSO profile you created — found in admin.google.com → Security → Authentication → SSO with third-party IdP → your profile → Service Provider details.
The ACS URL Google generated. It looks like https://accounts.google.com/samlrp/<profile_id>/acs.
At least one user mapping — which Google email maps to which Wink identity. For users whose handle matches on both sides, leave them out and our happy-path fallback will let them through.

Haven't set up Google admin yet? Setup guide →