Tag Archives: SAML

Adding ten third-party applications to the G Suite pre-integrated SSO apps catalog

Single-Sign-On (SSO) enables users to access their enterprise cloud applications—including administrators signing in to the Admin console—by signing in one time for all services. Google supports the two most popular Enterprise SSO standards, OpenID Connect and SAML. There are over 800 applications with pre-integrated SSO support in our third party apps catalog already, and we are constantly adding more.

Today, we’re adding SAML integration for ten additional applications: BambooHR, ClearSlide, Domo, Egnyte, Federated Directory, HipChat Server, Samanage, SAP Cloud Platform Identity Authentication, UserTesting, and Workfront.

You can find our full list of pre-integrated applications, as well as instructions for installing them, in the Help Center.

Note that apart from the pre-integrated SAML applications, G Suite also supports installing “Custom SAML Applications” which means that admins can install any third-party application that supports SAML. The advantage of a pre-integrated app is the installation is much easier. You can learn more about installing Custom SAML Applications in this Help Center article.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Using SAML to set up federated SSO

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Easily create, delete, and rotate the X.509 certificates used with your SAML apps

SAML uses X.509 certificates to ensure the authenticity and integrity of messages shared between an Identity Provider (IdP) and Service Provider (SP). These certificates are associated with your SAML applications when you first install them via the Admin console and have a five-year lifetime. When a certificate expires, a user can’t sign in to the associated application using SAML-based SSO.

To change an application’s existing certificate (e.g. because it’s about to expire or has been compromised in some way), an admin needs to “rotate” it. Traditionally, you could do this with help from Google Support. Today, we’re giving you the ability to do so on your own in the Admin console, where you can easily view certificates in use, identify those about to expire, create new ones, and assign them to applications.

Please note that only super admins will be able to view the expiration status of SAML certificates and take action on them.

To learn more about SAML certificate rotation and how to manage certificates, please visit the Help Center.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Using SAML to set up federated SSO
Help Center: Maintain SAML certificates

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Adding nine third-party applications to the G Suite pre-integrated SSO apps catalog

Single-Sign-On (SSO) is one of those rare features that enhances security while also increasing convenience for end users. Google supports the two most popular SSO standards - OpenID Connect and SAML, both of which are popular with enterprises. There are over 800 applications with pre-integrated SSO support in our third party apps catalog already, and we are constantly adding more. With today’s launch, we are adding SAML integration for these nine applications: Asana, Dialpad, Evernote Business, Expensify, Keeper, Lucidchart, Pagerduty, RingCentral, and Trello.

You can find our full list of pre-integrated applications, as well as instructions for installing them, in the Help Center.

Note that apart from the pre-integrated SAML applications, G Suite also supports installing “Custom SAML Applications” which means that admins can install any third-party application that supports SAML. The advantage of a pre-integrated app is the installation is much easier. You can learn more about installing Custom SAML Applications in this Help Center article.

Differences between G Suite Marketplace and the SAML Apps Catalog

You may notice that some of the applications we are launching today to the SAML catalog - namely Asana, Dialpad, Expensify, Lucidchart, RingCentral, and Trello - are already available in the G Suite Marketplace. When installed via the Marketplace, these applications provide rich integration with G Suite products. In addition to these deep integrations, the applications typically provide a separate ‘Google SSO’ option, which is authentication via OpenID Connect protocol, for users to access their accounts on the application’s website.

The SAML catalog version, on the other hand, only provides SAML-based authentication so that your users can access their accounts in the third party app’s website using Google as a SAML IdP (Identity Provider). Some enterprises prefer the SAML approach, and in fact, we see many admins installing these as Custom SAML Apps even today. This launch is all about giving our customers more choice to integrate their applications using a method that suits them.

If you do not have a corporate requirement to use SAML, Google recommends using the G Suite Marketplace application.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Using SAML to set up federated SSO

Adding nine third-party applications to the G Suite pre-integrated SSO apps catalog

Single-Sign-On (SSO) is one of those rare features that enhances security while also increasing convenience for end users. Google supports the two most popular SSO standards - OpenID Connect and SAML, both of which are popular with enterprises. There are over 800 applications with pre-integrated SSO support in our third party apps catalog already, and we are constantly adding more. With today’s launch, we are adding SAML integration for these nine applications: Asana, Dialpad, Evernote Business, Expensify, Keeper, Lucidchart, Pagerduty, RingCentral, and Trello.

You can find our full list of pre-integrated applications, as well as instructions for installing them, in the Help Center.

Note that apart from the pre-integrated SAML applications, G Suite also supports installing “Custom SAML Applications” which means that admins can install any third-party application that supports SAML. The advantage of a pre-integrated app is the installation is much easier. You can learn more about installing Custom SAML Applications in this Help Center article.

Differences between G Suite Marketplace and the SAML Apps Catalog

You may notice that some of the applications we are launching today to the SAML catalog - namely Asana, Dialpad, Expensify, Lucidchart, RingCentral, and Trello - are already available in the G Suite Marketplace. When installed via the Marketplace, these applications provide rich integration with G Suite products. In addition to these deep integrations, the applications typically provide a separate ‘Google SSO’ option, which is authentication via OpenID Connect protocol, for users to access their accounts on the application’s website.

The SAML catalog version, on the other hand, only provides SAML-based authentication so that your users can access their accounts in the third party app’s website using Google as a SAML IdP (Identity Provider). Some enterprises prefer the SAML approach, and in fact, we see many admins installing these as Custom SAML Apps even today. This launch is all about giving our customers more choice to integrate their applications using a method that suits them.

If you do not have a corporate requirement to use SAML, Google recommends using the G Suite Marketplace application.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Using SAML to set up federated SSO