topic Re: SSO with Google Workspace in Portal

SSO with Google Workspace

mstrusinski — Fri, 20 Jan 2023 17:34:56 GMT

I searched around for other posts on this topic, but didn't find anything specific to Google Workspace.

I'm working to implement SSO via "generic SAML" so that I can use my Google Workspace for idP.

I've run into a snag when trying to map attributes from Google Workspace to Check Point Infinity Portal. Does anyone have any experience mapping attributes between these providers? A screenshot would be solid gold!

Cheers!

Matt
Owner/Founder
Oviedo Cybersecurity Consulting LLC
oviedocyber.com

Re: SSO with Google Workspace

_Val_ — Mon, 23 Jan 2023 08:46:00 GMT

Look here: https://community.checkpoint.com/t5/Remote-Access-VPN/About-Mobile-Access-vpn-using-Google-Workspace-ID/td-p/159338#M7871

Re: SSO with Google Workspace

G_W_Albrecht — Mon, 23 Jan 2023 10:21:54 GMT

sk172909: SAML authentication in Remote Access VPN clients

Re: SSO with Google Workspace

mstrusinski — Mon, 23 Jan 2023 23:17:32 GMT

I appreciate the suggestions from G_W_Albrecht and _Val_. Those seem to reference gateways and clients. Maybe I'm approaching the architecture here completely wrong. I thought that because I am accessing infinity portal via web browser that I'd be able to use SSO for authentication to the web instance of infinity portal, instead of username/password.
Am I wrong about that assumption?

Re: SSO with Google Workspace

PhoneBoy — Tue, 24 Jan 2023 04:38:36 GMT

We list a number of SSO providers that we have known integrations with here: https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Infinity-Portal-Admin-Guide/Content/Topics-Infinity-Portal/SSO-Authentication-Setup-IdP.htm?tocpath=SSO%20Authentication%20Setup%20with%20Identity%20Provider%7C_____0

We just do not have specific instructions for Google Workspace.
Not sure if anyone has integrated this or not.

Re: SSO with Google Workspace

Lior_Manor — Tue, 24 Jan 2023 15:53:49 GMT

Hi,

We have a specific Google Workspace IdP connector which is currently in EA. Please send me your Infinity Portal tenant details and we will enable it for you - liorm@chcekpoint.com.

Lior

Re: SSO with Google Workspace

mstrusinski — Tue, 24 Jan 2023 20:12:44 GMT

I would be interested in having this connector enabled for my organization. I sent you an email with my details.

Thank you!

Re: SSO with Google Workspace

mstrusinski — Wed, 25 Jan 2023 19:45:07 GMT

In order to enable other users to implement SSO with Workspace, here is the attribute mapping required:

Google Workspace Attribute Check Point Infinity Portal Attribute

Primary email email

first name firstName

last name lastName

Employee ID userId

Groups

Google Workspace Group Check Point Groups
Groups <leave blank>