<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y00006V6zlySABOkta Classic EngineSingle Sign-OnAnswered2025-04-12T09:03:58.000Z2019-07-30T18:31:32.000Z2019-09-03T22:19:41.000Z

x7lmh (x7lmh) asked a question.

Gsuite - Exclude a domain from SSO

Let's say you have a domain (a.com) already setup with Okta as the SSO provider in GSuite then you add a second domain (b.com) to your Gsuite instance. Is there a way to exclude b.com from SSO so the users in that domain can login using the standard gmail login?


  • Hey Matt

     

    Absolutely, you should be able to use Google's Network Masks to specify which addresses will be affected by single sign-on. If no masks are specified, SSO functionality will be applied to the entire network. Use a semicolon to separate the masks. Example: (64.233.187.99/8; 72.14.0.0/16). For ranges, use a dash. Example: (64.233.167-204.99/32). All network masks must end with a CIDR.

     

    https://support.google.com/a/answer/6369487?hl=en

     

    Expand Post
    Selected as Best
  • Hey Matt

     

    Absolutely, you should be able to use Google's Network Masks to specify which addresses will be affected by single sign-on. If no masks are specified, SSO functionality will be applied to the entire network. Use a semicolon to separate the masks. Example: (64.233.187.99/8; 72.14.0.0/16). For ranges, use a dash. Example: (64.233.167-204.99/32). All network masks must end with a CIDR.

     

    https://support.google.com/a/answer/6369487?hl=en

     

    Expand Post
    Selected as Best
This question is closed.
Loading
Gsuite - Exclude a domain from SSO