G Suite SAML RA VPN

[Wyman]

Hi. We're trying to configure SAML authentication on R80.40 via G Suite; we've completed the setup process as described in the SAML for Remote Access VPN release notes. In the documentation and videos we've seen, Azure has been the Identity Provider. 

We're now trying to setup an access policy rule for G Suite users but this is where we're hitting a problem. It looks like the process is to add an identity tag that is linked to the external identifier (for Azure) but it doesn't seem that G Suite has an equivalent.

Has anybody successfully configured SAML for G Suite, or have any pointers to overcome this? Thanks in advance.

[PhoneBoy · Accepted solution]

Not so sure a tag is required.
Believe the access role can be set up as “any authenticated” and you can specify the Remote Access client types allowed as well.
Obviously if you want granularity based on user type you will need something like a tag in the G-Suite end, not sure what their equivalent is.

[Wyman]

Thanks PhoneBoy, it's worked.

[Icaro_IT]

Hello Wyman
Can u share how you configure SAML with Google? I'm try, but not work working.
Are u make SAML Attribute Mapping on Google? If yes, how your configurated?