Google introduces new way to log-in to your account; know how 'Single Sign-On' works

Google has introduced a new way to log-in to your account. Here is all you need to know.

Here is all you need to know about Single Sign-On. (Pixabay)

Google has introduced Google Cloud and Workspace support for multiple identity providers with 'Single Sign-On' (SSO). "For our business customers, we provide administratively managed Google accounts that can be used to access Google Workspace, Google Cloud, and BeyondCorp Enterprise. Today we're announcing that these organizational accounts support single sign-on (SSO) from multiple third-party identity providers (IdPs), available in general availability immediately. This allows customers to more easily access Google's services using their existing identity systems," Google Cloud said in a blog post.

"Currently, Google Cloud customers can enable a single identity provider for their users with the SAML 2.0 protocol. This release significantly enhances our SSO capabilities by supporting multiple SAML-based identity providers instead of just one," the blog post further added.

Explaining business cases for supporting multiple identity providers, Matthew Soldo, Product Manager, Google Workspace Identity, said in the blog post that organisations have multiple identity providers resulting from mergers and acquisitions, or due to differing IT strategies across corporate divisions and subsidiaries.

Google Cloud Single Sign-On- How it works

Step 1:

Google Cloud Administrators must first configure one or more identity provider profiles in the Google Cloud Admin console. It supports up to 100 profiles.

Step 2:

These profiles require information from your identity provider, including a sign-in URL and an X.509 certificate.

Step 3:

Once these profiles have been created, they can then be assigned to the root level for your organization or to any organizational unit (OU).

Step 4:

In addition, profiles can be assigned to a Group as an override for the OU.

Step 5:

It is also possible to configure an Organizational Unit or group to sign in with Google usernames and passwords instead of a third-party IdP.

SSO currently supports SAML 2.0 protocol and Google is planning on adding support for OIDC later this year. "By supporting OIDC, Google Cloud customers can choose which protocol is best for the needs of their organization. OIDC works alongside the multi-IdP support being released now, so administrators can configure IdPs using both SAML and OIDC," the blog post added.