2 steps: 1. Enable Custom SSL https://support.google.com/a/answer/2644334?hl=en&ref_topic=2644333 2. Configure certs and custom domains https://support.google.com/a/answer/2644386