G-suite SAML app for Azure

gaurav_2626 1 Reputation point
2020-06-06T18:05:11.933+00:00

We want to enable guest users for a particular domain to login with their G Suite accounts. I have setup the direct federation.

I am having doubts in how the attribute mapping part of SAML app at g-suite end is configured. Can any one please help me on what type of attributes are to be mapped.

Any ideas?

Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,582 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,376 Reputation points Microsoft Employee
    2020-06-09T22:12:20.58+00:00

    @gaurav_2626

    I was able to look into your question(s) and found that you can set up G-Suite SSO with SAML for Azure. I'll post the related links below. When it comes to the attribute mapping you can follow the SAML - Steps, link below for more details. However, I'll also post the screenshots below for your reference.

    1. Your Google Cloud (G Suite) Connector application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. The following screenshot shows an example for this. The default value of Unique User Identifier is user.userprincipalname but Google Cloud (G Suite) Connector expects this to be mapped with the user's email address. For that you can use user.mail attribute from the list or use the appropriate attribute value based on your organization configuration.

    9742-screenshot1.jpg

    1. On the Set up single sign-on with SAML page, in the SAML Signing Certificate section, find Certificate (Base64) and select Download to download the certificate and save it on your computer.

    9653-screenshot2.jpg

    1. On the Set up Google Cloud (G Suite) Connector section, copy the appropriate URL(s) based on your requirement.

    9633-screenshot3.jpg

    ----------

    Links:

    Azure AD SSO integration with G Suite - Overview

    Pre-requisites

    Configure Azure AD SSO with SAML - Steps

    FAQs