Overview

Google Workspace supports secondary domains, but the Google Workspace application that is available in Okta cannot use these for the Security Assertion Markup Language (SAML) flow.
 

Applies To

• Google Workspace
• Single Sign On (SSO)
• Domains

Solution

Having a secondary domain set up in the General Tab in the Google Workspace integration is a limitation of the application in Okta.

However, admins can add additional domains in Google Workspace, and Okta will recognize the domain as federated, and also provisioning will work as long as the domain is verified in Google.

In order for this to work:
 

• Domains must be added and verified in Google.

•  When using Okta as an IDP, the SSO profile created under Third Party SSO profiles in Google Workspace after federating with Okta must be applied to the whole organization under Manage SSO Profile assignments. 

Related References

• Set up SSO for your organization