Tag Archives: Scheduled Release

Session length controls for domains using SAML

In March, we introduced a setting that allows G Suite Business, Enterprise, and Education admins to specify the duration of web sessions for Google services (e.g. four hours, seven days, or infinite). At the time, this setting only applied to domains where Google was responsible for the login (i.e. where Google was the Identity Provider). We’re now extending the reach of this setting and making it applicable in domains that federate to another Identity Provider (IdP) using SAML.


Note that these settings apply to all desktop web sessions, as well as some mobile browser sessions. Native mobile apps, like Gmail for Android and iOS, aren’t impacted by these settings.

Removing session-based cookies on May 7th, 2018

In the past, in order to give more control over session lengths to a G Suite customer’s preferred IdP, we set cookies for sessions created by federating to another IdP via SAML as transient, or session-based. These cookies were intended to expire whenever the browser was closed, meaning the user would be redirected to their primary IdP whenever they reopened the browser and visited a Google site.

Over time, however, this behavior has become increasingly inconsistent across browsers. We believe that G Suite admins are better served by explicit session length controls, like the ones we just launched. Unlike session cookies, these controls are respected regardless of the user’s browser.

With this in mind, we’ll be removing session-based cookies for G Suite customers who federate to another IdP via SAML on May 7th, 2018. Please consider setting a custom session length for your organization if your workflows depend on it.

Replicating previous behavior

If it’s critical to replicate the previous behavior, where all sessions expired when a browser was closed, you can change the browser settings on impacted machines to delete all Google cookies when the browser is exited. Instructions to configure this on Chrome can be found here. To deploy this policy on multiple machines, use Chrome policies to configure session-only cookies for [*.]google.com.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to G Suite Business, Enterprise, and Education editions only

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Set up session length for Google services

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Receive Google prompts on iOS devices via the Gmail app

In 2017, we made Google prompt the primary choice for G Suite users turning on two-step verification for the first time. Back then, we noted that users with iOS devices would need to install the Google app in order to use the feature. Today, we’re making it possible for users with iOS devices to receive prompts via their Gmail app as well. This should encourage more people to use Google prompt, which is an easier and more secure method of authenticating an account.


Note that if users have both the Google and Gmail app installed on their iOS device, they’ll see prompts from Gmail.

For more information, visit the Help Center.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Extended rollout (potentially longer than 15 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
Help Center: Sign in faster with 2-Step Verification phone prompts

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Allow users to install any app on their managed Android devices

Until now, G Suite users with company-owned Android devices and those with work profiles could only install mobile apps that had been specifically whitelisted by their admin. In some organizations, however, such restrictions weren’t critical, and whitelisting required unnecessary time and effort. That’s why, going forward, we’re giving admins the option to allow their users to install any app in the managed Google Play store on Android devices that are corporate-owned or have work profiles.

Admins can select this option in the Admin console under Device management > App Management > Manage apps for Android devices.


If an admin selects “Allow all apps,” he or she can still whitelist specific apps. These whitelisted apps will appear on the managed Google Play homepage, but users will be able to find any app using the search tool.


For more information, visit the Help Center.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Manage apps on mobile devices


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Improved user management in the Admin console

We’re updating the interface you use when you manage your organization’s users in the Admin console. These changes will make it easier to find and control user information and settings. For more information, see our Help Center topic on how to add and manage users.

New quick actions panel 
When you click into an individual user, you’ll see a user information panel, which allows you to quickly see and edit basic information about the user.

Category cards provide more detailed user management 

When you’re looking at an individual user, you’ll also see cards with summarized information that will give you a quick overview of the most important information in several categories. Click on the cards to view the settings in detail or to quickly edit information related to that user. Depending on the user’s account and your administrator privileges, you’ll see some or all of these cards:
  • User information. View and edit the user’s contact information and see custom attributes. 
  • Security. Control the user’s security settings, like 2-step verification and security keys. 
  • Groups. See the user’s group memberships and roles, and manage their roles in those groups. 
  • Admin roles and privileges. See and change admin controls granted to the user. 
  • Apps. View apps the user has installed on a managed device. 
  • Managed devices. View and manage the devices associated with the user. 
  • Licenses. See licenses granted to the user and control individual user licenses. See more below. 
  • Team Drives. See the user’s Team Drives memberships and manage Team Drive settings. 

New license management functions 

One of the new cards is a Licenses card which will help improve visibility and management of licences within your organization. It features:
  • Improved license states to provide a better understanding of a user’s license assignment. 
  • Separate view mode and edit modes to aid decision making for license management. 
  • Improved error handling and messaging to help admins. 


Launch Details 
Release track:
Launching to both Rapid Release and Scheduled Release

Editions: 
Available to all G Suite editions

Rollout pace: 
Gradual rollout (up to 15 days for feature visibility)

Impact: 
Admins only Action: Admin action suggested/FYI

More Information
Help Center: Add users 
Help Center: Manage user accounts 
Help Center: Manage passwords 
Help Center: Grant administrator privileges 
Help Center: Apply policies to different users 


Launch release calendar

Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Group users into multiple directories in G Suite

The G Suite Directory surfaces profile information to users in your organization, allowing them to easily find and learn about one another while they work in G Suite apps. For instance, autocomplete in Gmail makes it easy for users to find their coworkers’ email addresses and quickly send them a message.

Previously, we allowed one directory per domain, which meant G Suite admins could only enable or disable contact visibility for their entire domain and couldn’t specify who saw what information. We’re now making it possible for G Suite admins to cluster users in separate directories with custom visibility rules for each organizational unit (OU). For example, a company might give full-time employees access to a global directory, because they want them to be able to find other full-time employees and temps. At the same time, they might not want temps to be able to find full-time employees, so they’ll limit them to a custom directory with restrictions applied.



Admins can configure these visibility rules in the Admin console under Apps > G Suite > Settings for Directory.




For more information on configuring Directory settings, check out this Help Center article.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Create custom directories

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Dial into Hangouts Meet from six additional markets

In October 2017, we announced the rollout of international Hangouts Meet dial-in phone numbers for G Suite Enterprise domains. This option helps your team to stay connected, wherever they are. We’ve added this functionality for six additional countries (with more to come!):
  • Dominican Republic (DO)
  • Estonia (EE)
  • Greece (GR)
  • Hungary (HU)
  • Latvia (LV)
  • Luxembourg (LU)

For a complete list of currently supported countries, visit this Help Center article


Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to G Suite Enterprise edition only

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
Help Center: Dial in from a phone
Help Center: Join a video meeting


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Call a US or Canadian phone number for free from Hangouts Meet

With easy-to-join video calls, Meet helps your team stay connected. Sometimes, you may want to add participants to your meeting without needing to send them a link, like when you want to connect folks who are already dialed into a conference bridge, or if a team member is running late and is still on their commute. That’s why you can now call US or Canadian phone numbers, directly from your meeting, for free.

With this launch, G Suite users who are in the same domain as the event organizer, and who are accessing Meet through their web browser, can add someone by phone using the instructions in the Help Center.




To give their users access to this feature, G Suite admins will first need to enable Google Voice in the Admin console.

Please note, this feature is currently supported from specific countries only. Please reference this Help Center article for a list of countries that are currently eligible to use this feature.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Admin action suggested/FYI

More Information
Help Center: Add someone by phone to a video meeting
Help Center: Let users add people by phone to meetings
Help Center: Enable Google Voice

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Twenty three third-party applications added to the G Suite pre-integrated SAML apps catalog

With Single Sign-On (SSO), users can access all of their enterprise cloud applications—including the Admin console for admins—after signing in just once. Google supports the two most popular enterprise SSO standards, OpenID Connect and SAML, and there are many applications with pre-integrated SSO support in our third-party apps catalog already.

Building on other recent launches (February 27th, March 12th), we’re adding SAML integration for 23 additional applications:


  • Adaptive Insights 
  • Buildkite 
  • Citrix ShareFile 
  • CrashPlan 
  • Fuze 
  • HappyFox 
  • Huddle 
  • Image Relay 
  • itsLearning 
  • Jobvite 
  • Klipfolio 
  • Mimecast 
  • Mozy 
  • Enterprise 
  • Periscope Data 
  • Pipedrive 
  • Pritunl 
  • Qubole 
  • Runscope 
  • Saba 
  • Solium Shareworks 
  • Spotinst 
  • VictorOps 
  • Zuora 

You can find our full list of pre-integrated applications, as well as instructions for installing them, in the Help Center.

Note that apart from the pre-integrated SAML applications, G Suite also supports installing “Custom SAML Applications,” which means that admins can install any third-party application that supports SAML. The advantage of a pre-integrated app is that the installation is much easier. You can learn more about installing Custom SAML Applications in this Help Center article.

Launch Details 
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace: 
Gradual rollout (up to 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information 
Help Center: Using SAML to set up federated SSO

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Control session length for Google services on the web

To protect your organization’s data, we automatically sign any G Suite user out of Google services they’re using on the web (like Gmail and Drive) after two weeks. We’ve heard, however, that some organizations need different durations for different use cases. For instance, if users access work data outside their corporate network, a shorter session length may be warranted. In other cases, a longer session length may be appropriate, and not requiring users to continually enter their password makes for a much better experience.

That’s why we’re giving G Suite Business, Enterprise, and Education admins the ability to specify the duration of web sessions for Google services (e.g. four hours, seven days, or infinite). Unless a user logs out on their own beforehand, they’ll be automatically signed out at the end of that duration and prompted to re-enter their login credentials.


These settings apply to all desktop web sessions, as well as some mobile browser sessions. Native mobile apps, like Gmail for Android and iOS, aren’t impacted by these settings. These settings also only apply to domains where Google is responsible for the login (i.e. where Google is the Identity Provider), and not to domains that federate to another Identity Provider using SAML. Support for these domains will be added in the future.

For more information on specifying session duration for Google services, please see the Help Center

2-step verification (2SV) frequency

When a user logs into their G Suite account today, they’re given an option to “Remember this computer.” When this box is checked, they’re not prompted for their second factor—even if they log out of their Google session and log back in.


As part of this launch, we’re giving all admins the option to show their users this checkbox or have them presented with a 2SV challenge every time they enter their password.


When “Allow the user to trust the device at 2-step verification” is selected, the checkbox will be displayed. This is the default. When “Do not allow the user to trust the device at 2-step verification” is selected, the user will be forced to undergo a 2SV challenge every time they sign in. These settings can be found in the Admin console under Security > Advanced settings. They have no impact on users who aren’t enrolled in 2SV.

For more information on setting 2SV frequency, please see the Help Center.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Session duration controls available to G Suite Business, Enterprise, and Education editions only; 2SV frequency controls available to all G Suite editions

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Set up session length for Google services

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Jamboard files now appear in Google Drive

With Jamboard, it’s easy to enrich your team brainstorms with the power of G Suite. For example, you can grab images and content from the web and bring them straight into your “jam,” pull in work from Google Docs, Sheets and Slides, or add photos stored in Drive.

To make the Jamboard experience even more integrated with G Suite, the jam files you own will now appear in your Drive folder. This means you can easily open, copy, and share jam files from My Drive and Team Drives, and save jam files from Jamboard to My Drive.



With this launch you can:

  • Share jam files directly from Drive.
  • Open jam files from Drive in the Jamboard web and mobile applications.
  • Search for jam files in Drive (by entering “type:jam” in the Drive search bar).
For more information on using Jamboard, check out the Help Center.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
Help Center: Jamboard and Google Drive

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates