https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/GCPW-when-Google-is-authenticated-behind-an-SSO-provider/m-p/116105#M3554 <P>Has anyone experienced or worked with this scenario:</P><UL><LI>We have an SSO provider that apps authenticate to (SAML, etc.)</LI><LI>Google authenticates (and password management) through this SSO provider</LI></UL><P>How would installing GCPW work (or not work, or difficulties) when the authentication is through an SSO provider, but GCPW is installed on the machine? Password resets go to a specific SSO password page for reset, etc.</P><P>As cybersecurity insurance is obviously going to get more stringent on their requirements (ie. MFA for admin actions or accounts), if we were able to install GCPW on each AD-joined machine and then users would just authenticate using their Google (really their SSO) credentials which would prompt for MFA (presumably, still reading through documentation), that could satisfy the requirement that inevitably will come down the pipeline.</P><P>Note that since we use AD and GPO, we wouldn't be interested in the Windows Management aspect at this time, perhaps in the future, but I think there's too much work probably needing to be done to move completely away from AD to Google-only.&nbsp;</P><P>Note 2: our SSO provider does offer a Desktop app that would authenticate users to the SSO platform, but it is an additional cost</P> Wed, 18 Dec 2024 16:43:05 GMT alexgrutza 2024-12-18T16:43:05Z https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/GCPW-when-Google-is-authenticated-behind-an-SSO-provider/m-p/116105#M3554 <P>Has anyone experienced or worked with this scenario:</P><UL><LI>We have an SSO provider that apps authenticate to (SAML, etc.)</LI><LI>Google authenticates (and password management) through this SSO provider</LI></UL><P>How would installing GCPW work (or not work, or difficulties) when the authentication is through an SSO provider, but GCPW is installed on the machine? Password resets go to a specific SSO password page for reset, etc.</P><P>As cybersecurity insurance is obviously going to get more stringent on their requirements (ie. MFA for admin actions or accounts), if we were able to install GCPW on each AD-joined machine and then users would just authenticate using their Google (really their SSO) credentials which would prompt for MFA (presumably, still reading through documentation), that could satisfy the requirement that inevitably will come down the pipeline.</P><P>Note that since we use AD and GPO, we wouldn't be interested in the Windows Management aspect at this time, perhaps in the future, but I think there's too much work probably needing to be done to move completely away from AD to Google-only.&nbsp;</P><P>Note 2: our SSO provider does offer a Desktop app that would authenticate users to the SSO platform, but it is an additional cost</P> Wed, 18 Dec 2024 16:43:05 GMT https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/GCPW-when-Google-is-authenticated-behind-an-SSO-provider/m-p/116105#M3554 alexgrutza 2024-12-18T16:43:05Z