Okta applies one authentication policy to the Google Workspace application integration, so separate policies cannot control individual Google Workspace applications. To address this limitation, configure policy decisions at the Google Workspace integration level instead of per application.

A user may want to allow access to Gmail from devices running iOS while blocking access to Google Drive from devices running iOS. Okta does not support separate authentication policies for constituent Google Workspace applications such as Gmail, Drive, Sheets, and Docs.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Google Workspace
• Authentication Policies
• Application integrations

Okta applies authentication policies at the application integration level. The Google Workspace Okta integration represents the full Google Workspace suite, so Okta enforces the same authentication policy across all constituent Google Workspace applications.

Does Okta support different authentication policies for individual Google Workspace applications?

Okta does not support applying authentication policies to individual Google applications within Google Workspace. Okta applies authentication policies at the application integration level. Configuring an authentication policy for the Google Workspace integration applies the rules to all constituent services within the Google suite, such as Gmail, Google Drive, and Google Docs.

Plan access control requirements with the understanding that Okta cannot assign separate authentication policies to individual Google Workspace applications within that integration.

Related References

• Authentication policies
• What are policies?