In the Admin console, go to Menu Devices Chrome Settings Device. After testing SAML SSO with a small number of users, roll it out to approximately 5% of your users. If you don’t have a test domain, test SAML SSO with a small number of users by creating a test group and enabling SSO for users only in that group. Set up and test SAML SSO on a test domain you own. If you haven’t already, set up single sign-on for managed Google Accounts using third-party Identity providers. Domain configured for SAML SSO for Google Workspace.ChromeOS device running version 36 or higher.However, because a user is signing in to a device, there are several additional considerations.įor more details, see Set up single sign-on for managed Google Accounts using third-party Identity providers.

Signing in is very similar to signing in to a Google Workspace account from a browser via SAML SSO. Their passwords can remain within your organization's Identity Provider (IdP).

Security Assertion Markup Language (SAML) single sign-on (SSO) support for ChromeOS devices allows users to sign in to a device with the same authentication mechanisms that you use within the rest of your organization.

Seamless web log in