Note: If you are using Google as your SAML IdP for Duo Single Sign-On you cannot protect that same G-Suite account with Duo Single Sign-On.Ĭreate the Google Workspace Application in Duo Once you have your SSO authentication source working, continue to the next step of creating the Google Workspace application in Duo. Configure Single Sign-Onīefore configuring Google Workspace you'll first need to enable Duo Single Sign-On for your Duo account and configure a working authentication source. ![]() Duo checks the user, device, and network against an application's policy before allowing access to the application. For example, you can require that Salesforce users complete two-factor authentication at every login, but only once every seven days when accessing Google Workspace. Duo Single Sign-On acts as an identity provider (IdP), authenticating your users using existing on-premises Active Directory (AD) or any SAML 2.0 IdP and prompting for two-factor authentication before permitting access to Google Workspace.ĭuo Single Sign-On is available in Duo Beyond, Duo Access, and Duo MFA plans, which also include the ability to define policies that enforce unique controls for each individual SSO application. In addition, as sensitive information makes its way to cloud-hosted services it is even more important to secure access by implementing two-factor authentication.ĭuo Single Sign-On is our cloud-hosted SSO product which layers Duo's strong authentication and flexible policy engine on top of Google Workspace logins using the Security Assertion Markup Language (SAML) 2.0 authentication standard. If a user's primary password is compromised, attackers may be able to gain access to multiple resources. While SSO is convenient for users, it presents new security challenges. Single sign-on (SSO) technologies seek to unify identities across systems and reduce the number of different credentials a user has to remember or input to gain access to resources. Learn more about SSO and GCP.Īs business applications move from on-premises to cloud hosted solutions, users experience password fatigue due to disparate logons for different applications. These same instructions provide SAML SSO to Google Cloud Platform (GCP) as well, as Google Workspace and GCP share the underlying domain's authentication configuration. ![]() In order to sync your Google account with applications that do not use a Web login, you will need to setup 2-step verification and an app password.Add two-factor authentication and flexible security policies to Google Workspace (formerly called G Suite) SSO logins with Duo Single-Sign On, our cloud-hosted SAML 2.0 identity provider, complete with inline self-service enrollment and Duo Prompt. When prompted for email address, enter your WMU email address (ie. If you would prefer to sync your WMU Google Workspace account with the built-in apps on your iOS device, please see below: Using the default Contacts & Calendar apps You may then follow the instructions to log in using Google's Desktop & Mobile Apps. If you would like to sync your WMU Google Workspace account with your iOS device, we recommend downloading the corresponding Google app from the App Store for the best experience: IOS Using Google's mobile apps (preferred) ![]() When prompted for email address, enter your WMU email address (ie.Keep in mind, the wording may vary slightly based on your device manufacturer. If you would like to sync your WMU Google Workspace account with your Android device, use the following instructions. You are now signed in to your WMU Google Workspace account.If you are using one of Google's desktop apps, such as Google Drive for desktop, or one of their mobile apps, such as Google Calendar for iOS, use the following sign-in instructions: If you are already signed in to a personal Google account, please see Google's support article here about managing multiple Google accounts within your web browser. Click the App Selector in the top right to navigate to your desired Google Workspace App. After authentication, you will be brought to Google Drive.Enter your Bronco NetID and Password and click Log In. ![]() You will be re-directed to the WMU Login.To access Google Workspace from your web browser, use the following sign-in instructions: Platform: Web Browsers, Mobile Devices, Windows, macOSĪffiliation: Students/Instructors/Employees Using Your Web Browser
0 Comments
Leave a Reply. |