<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D54z00007D93tcCABOkta Classic EngineSingle Sign-OnAnswered2024-04-30T09:04:38.000Z2021-09-28T06:32:48.000Z2021-10-14T13:21:19.000Z

MatthewG.82472 (Customer) asked a question.

September 28, 2021 at 6:32 AM
Google Workspace SWA URL

Has anyone found a url that successfully uses Okta's generic SWA app to login a Google Workspace user? We're hoping to use the generic app over the the pre-built Google Workspace app for our shared accounts i.e. helpdesk@acme.co to keep things cleaner and speed up setup but every URL we've found/tried redirects to the users personal workspace account including accounts.google.com/signin...... We're not against using the pre-built workspace app but have a solid list so were hoping to avoid the full config for each app that comes with the pre-built app.

  • 4 answers
  • 894 views

  • b06b6 (b06b6)

    Hi Matthew,

     

    Thanks for your post!

     

    After doing some testing I confirmed the following URL successfully redirects to Google Login page exposing email field, so a Template Two Page Plugin App should work with it. However, since you are trying to find the easiest way to configure multiple App instances with the less possible config, I would advise you to use the OIN App instead.

     

    URL:

    https://accounts.google.com/AddSession?sacu=1&continue=https%3A%2F%2Faccounts.google.com

     

    Unfortunately Google Workspace is complex enough to need more configuration than the fields available on the SWA Generic App.

     

    Expand Post

    • AndyV.83591 (Customer)

      I have this actual same need for a shared email account and have yet to find a configuration, even using the Google Workspace app, that will allow me to access the shared account, instead, I am redirected to my personal workspace account. Is having multiple google workspace apps for a single user a supported configuration and I should expect to be able to login to each and not be redirected to my main Google Workspace account?

      Expand Post

      • MatthewG.82472 (Customer)

        Hi Andy, we've raised tickets with both Okta and Google and the best approach either have come back with is just using a new instance of the Google Workspace App for each account you need access to.

        As Juan pointed out above, there's too many complexities to get a clean work around.

        We're still filling out all the apps required but any of our testing is looking good for the following:

        • Split users in Google Workspace OUs to separate accounts that will authenticate with SAML vs SWA as per these instructions: Assign SSO profile to organizational units or groups - Google Workspace Admin Help
        • Create one Google Workspace App with Sign On set to SAML and apply to all individuals
        • Create one additional Google Workspace App with Sign On set to SWA for each shared Gmail and set so admin controls both username and password, turn off all Google Workspace App options except Gmail.
        Expand Post

  • AndyV.83591 (Customer)

    Hi Matt,

    Thanks, I will start down that path now. Appreciate your response and insight.

This question is closed.
Loading
Google Workspace SWA URL