Issue with Google Workspace SSO Using SAML with Only One Active Session

Last Updated: Sep 10, 2025

Overview

With a Google Workspace as the SAML IdP, and an active Google session that is not part of the SAML connection, it returns the error Application is not setup for the user instead of allowing the user to login to a different user.

Cause

SAML IdPs do not support upstream parameters. See Pass Parameters to Identity Providers for more details

Solution

Unfortunately, there is no solution. Usually, the app can prompt the user to select their account every time by passing the prompt=select_account parameter to Google during each login, but SAML connections do not accept this parameter.

To suggest this functionality, please consider raising it here: https://auth0.com/feedback