Google Workspace supports SSO (Single-Sing On) as the Identity Provider (IdP) using SAML.SSO can also be set up with third-party IdPs like Duo, Okta and Microsoft ADDS/EntraID.Secure LDAP service allows LDAP-based services to connect with Cloud Identity or Google Workspace accounts.Admin SDK API is used to interact with the Admin console's objects like Users, groups, OUs etc.Google Workspace Marketplace offers a wide variety of enterprise apps which can be installed for users.The Alert Center in Google Workspace helps to navigate any potential issues with the domain.User activity reports provide a view of user status and account activity.Google recommended medium to large business security settings can be viewed on Google Help page.Service Providers need to have SSO URL, Entity ID and Google Certificate to enable trust between Google and the SP.'IDP metadata' file can also be used to download the URLs and certificates for setup SSO.API Controls can be used to restrict access to specific API and create a trusted list of applications that can access disabled APIs.