# Best way to enable SSO for different domains?

**URL:** <https://community.amazonquick.com/t/best-way-to-enable-sso-for-different-domains/20855>\
**Category:** Q&A\
**Tags:** sso, admin, quick-sight\
**Created:** [November 6, 2023, 5:48pm UTC](https://community.amazonquick.com/t/best-way-to-enable-sso-for-different-domains/20855 "2023-11-06T17:48:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![particlepat](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/particlepat/32/2714_2.png) [@particlepat](https://community.amazonquick.com/u/particlepat)\
**Post date:** [November 6, 2023, 5:48pm UTC](https://community.amazonquick.com/t/best-way-to-enable-sso-for-different-domains/20855/1 "2023-11-06T17:48:08Z")

</div>

Hey everyone,

My company has two different Google Workspace domains ([company.com](http://company.com) and company.com.au) and no central Idp. I’d like to set up federated access to Quick Sight, but it looks like I can have only one SSO app.

Does anyone have any suggestions on the best way to handle this for our org?

---

<div class="post-metadata">

**Author:** ![Deep](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/deep/32/14783_2.png) [@Deep](https://community.amazonquick.com/u/Deep)\
**Post date:** [November 6, 2023, 6:01pm UTC](https://community.amazonquick.com/t/best-way-to-enable-sso-for-different-domains/20855/2 "2023-11-06T18:01:22Z")

</div>

Hello there,

Please refer to this previous post with similar question, may be it gives you some insight

> [@Multiple SSO idp providers with custom namespaces](https://community.amazonquick.com/t/multiple-sso-idp-providers-with-custom-namespaces/8420/5):
>
> Hi @rsinghal12 , There are 2 possible flows : Identity Provider Initiated (IdP-initiated) SSO User logs into the IDP Portal Quick Sight application is configured User is redirected to Quick Sight homepage when clicked . Service Provider Initiated (SP-initiated) SSO Quick Sight can also be configured for SP-initiated sign-on in the Enterprise edition. This setup enables Quick Sight to redirect the user to authenticate with the IdP first before granting access to the Quick Sight resources. I…

Thank you.

Cheers,  
Deep

---

<div class="post-metadata">

**Author:** ![particlepat](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/particlepat/32/2714_2.png) [@particlepat](https://community.amazonquick.com/u/particlepat)\
**Post date:** [November 22, 2023, 4:58am UTC](https://community.amazonquick.com/t/best-way-to-enable-sso-for-different-domains/20855/3 "2023-11-22T04:58:18Z")

</div>

I was able to do this by following this tutorial:

> **[Configure an automated email sync for federated SSO users to access Amazon...](https://aws.amazon.com/blogs/big-data/configure-an-automated-email-sync-for-federated-sso-users-to-access-amazon-quicksight/)**
>
> Amazon QuickSight is a scalable, serverless, embeddable, machine learning (ML)-powered business intelligence (BI) service built for the cloud that supports identity federation in both Standard and Enterprise editions. Organizations are working...

I also wanted to [set up email syncing](https://docs.aws.amazon.com/quicksight/latest/user/jit-email-syncing.html) and ended up writing some code to provision the Principal:Email from Google Workspace to Quick Sight. Script is available on my github: [GJG-GAM-Scripts/google-apps-scripts/updateGroupMemberAttributes.gs at main · patrickhaley/GJG-GAM-Scripts · GitHub](https://github.com/patrickhaley/GJG-GAM-Scripts/blob/main/google-apps-scripts/updateGroupMemberAttributes.gs)