Google Apps (SAML 2.0)
  • 29 Apr 2024
  • 2 Minutes to read
  • Contributors

Google Apps (SAML 2.0)


Article summary

Introduction

This article outlines the methods to set up Google Suite as your identity provider using either Google Service or Google SAML applications.

By integrating with Google Suite, Harmony SASE can authenticate users seamlessly.

Steps

Configuring the app at the G suite management console

  1. Open the G Suite management console.

  2. Select Apps.
    360009883339image7.png

  3.  Select Add custom SAML app.

  4. Enter the desired name, description, and logo.
    360009883840image8.png

    The app logo is optional and can be found using this link

  5.  Copy the SSO URL and download or copy the certificate, then select next.

  6. Fill in the following information:

7. 

Click on the "add mapping" button to create 4 different rows and then fill in the following attributes:

(every attribute will have its own row) 

1. Basic Information -> Primary email: email 

2. Basic Information -> Last Name: family_name

3. Basic Information -> First Name: given_name

4. Employee Details -> Department: groups 


8.

Once the application has been created select Status, and then turn it on for everyone.
360009883820image5.png

Configuring Harmony SASE

You need to configure the integration from the Harmony SASE side.

  1. Log in to your Harmony SASE Management Platform, navigate to Settings and then IdentityProviders.
    360008600320addprovider1.png
  2. Select + Add Provider.
  3. Select SAML 2.0 Identity Providers.
  4. Fill in SSO URL.
  5. Add your organization domain.
  6. Upload the certificate
    360007806800okta-addonp81.png
  7. Select Done.

Recommendations

  • When choosing between Google Service and Google SAML applications, consider the potential cost implications on Google's side for using Google Services.
  • A SAML integration mandates all users to authenticate using Google Suite, whereas a Google Service setup offers more flexibility, allowing specific user groups only.
  • Ensure you have the necessary permissions in both Google Suite and Harmony SASE for a successful integration.
  • When setting up, always replace placeholders with the correct values, such as your workspace name.
  • Save the generated Google Client ID and Client Secret for later use in Harmony SASE.
  • If connecting to Google Suite enterprise domains, remember to enable the Admin SDK service.
  • Periodically review your Google Suite configuration settings to ensure alignment with any updates or changes in the Harmony SASE platform.

Troubleshooting

If you encounter issues during or after the setup, try reviewing your settings to ensure everything matches the instructions. In particular, check the IP addresses and other details you entered during setup. If issues persist, please consult our dedicated support.

Support Contacts

If you have any difficulties or questions, don't hesitate to contact Harmony SASE's support team. We offer 24/7 chat support on our website at Perimeter81.com, or you can email us at sase-support@checkpoint.com. We're here to assist you and ensure your VPN tunnel setup is a success


Was this article helpful?