topic G Suite SAML RA VPN in SASE and Remote Access

G Suite SAML RA VPN

Wyman — Wed, 02 Jun 2021 12:12:08 GMT

Hi. We're trying to configure SAML authentication on R80.40 via G Suite; we've completed the setup process as described in the SAML for Remote Access VPN release notes. In the documentation and videos we've seen, Azure has been the Identity Provider.

We're now trying to setup an access policy rule for G Suite users but this is where we're hitting a problem. It looks like the process is to add an identity tag that is linked to the external identifier (for Azure) but it doesn't seem that G Suite has an equivalent.

Has anybody successfully configured SAML for G Suite, or have any pointers to overcome this? Thanks in advance.

Re: G Suite SAML RA VPN

PhoneBoy — Wed, 02 Jun 2021 15:38:08 GMT

Not so sure a tag is required.
Believe the access role can be set up as “any authenticated” and you can specify the Remote Access client types allowed as well.
Obviously if you want granularity based on user type you will need something like a tag in the G-Suite end, not sure what their equivalent is.

Re: G Suite SAML RA VPN

Wyman — Fri, 11 Jun 2021 08:47:28 GMT

Thanks PhoneBoy, it's worked.

Re: G Suite SAML RA VPN

Icaro_IT — Thu, 08 Aug 2024 13:20:43 GMT

Hello Wyman
Can u share how you configure SAML with Google? I'm try, but not work working.
Are u make SAML Attribute Mapping on Google? If yes, how your configurated?