Azure AD / GSuite SSO

[MrJDH]

Hello.

 

Just in the process of reading through https://docs.microsoft.com/en-gb/azure/active-directory/saas-apps/google-apps-tutorial to configure SSO.

 

At step 4 and 5, the sign-on URL for the SAML configuration specifies only Gmail and Google Cloud Platform as entry points.

 

At present, we only use GSuite for the use of Google Classroom. All email and other services are hosted on Office 365.

 

When I configured GSuite, I disabled the use of Gmail, as I don't want any overlap or confusion between that and Office 365.

 

Is there any other entry point/sign-on URL that can be configured? After a short chat with Google support, they said that the Gmail URL could be used even if Gmail was disabled globally, and that it would land the user on their Google account page. I proved this wrong just after leaving the chat - it states straightaway that email is disabled.

 

I am aware that custom URLs can be created in GSuite, but from the looks of things on the Azure AD configuration side, it would appear that only Gmail or Cloud Platform strings can be used:

 

Thanks.

[3s-gtech]

Try using https://www.google.com/a/yourdomain/ServiceLogin?continue=https://classroom.google.com/h

The 'yourdomain' needs to be your verified domain name.

Edited August 21, 2019 by 3s-gtech

[MrJDH]

Thank you for that. I guess my main concern was setting it all up for the URL to fail, and whether anyone could confirm for sure whether the Gmail and Cloud Platform strings were the only ones that would be accepted.

[MrJDH]

Try using https://www.google.com/a/yourdomain/ServiceLogin?continue=https://classroom.google.com/h

The 'yourdomain' needs to be your verified domain name.

 

This worked, or at least kick-started the setup. All working. Thanks.