• Cloud Edge Secure Access
• Welcome to SonicWall Cloud Edge!
• Prerequisites
• Installation
  • Accessing the Client Management Console
  • Installation Methods
• Networks
  • Understanding Networks
  • SDP Networks
  • Regions and Gateways
    • Adding a region
    • Adding a gateway
  • Connecting Infrastructure
    • Prerequisites
    • Site-to-Site Connections
    • IPsec Tunnel
    • WireGuard Connector
    • Connect On-Prem Resources
      • Firewalls
        • SonicWall
    • Connect Cloud Resources
      • Amazon AWS
        • AWS Virtual Gateway
        • AWS Transit Gateway
      • Alibaba Cloud
      • Microsoft Azure
      • Google Cloud Platform
      • Heroku Enterprise
      • IBM Cloud
      • Docker
• Groups and Members
  • Members
    • Inviting Members
    • Password Requirements
    • Managing Roles
  • Groups
    • Managing Groups
    • Identity Provider Groups
  • Identity Providers (IdP)
    • Integrate Identity Providers
    • Azure AD
      • Azure Active Directory (SAML 2.0)
      • Azure Active Directory
    • Google Suite
      • Google Services
      • Google Apps (SAML 2.0)
    • On-Premises Active Directory
    • SAML 2.0
      • Generic SAML
      • Active Directory Federation Services (ADFS)
      • Auth0
      • Okta
      • OneLogin
      • PingIdentity
      • JumpCloud
• Securing the Platform
  • Securing Networks
    • Segmenting Networks
    • Device Posture Check
    • Network Traffic Control
    • Firewall-as-a-Service
  • Securing User Access
    • Multi-Factor Authentication
      • MFA Authentication
      • DUO Security
    • Agent-less Access
      • Zero Trust Application
        • HTTP/HTTPS
        • RDP (Remote Desktop Protocol)
        • SSH (Secure Shell)
        • VNC (Virtual Network Computing)
      • Zero Trust Policies and Rules
    • Agent-based Access
      • SonicWall Agents
        • Downloading and Installation
      • Agents Configuration
        • User-Groups Policies
        • Managing Configurations
        • General Configurations
        • Network Configuration
        • OS-Specific Configurations
• Monitoring
  • Activity Tracking
    • Activities and Logs
    • Member Devices
  • Monitoring Dashboard
  • Integrations
    • Amazon S3
    • Azure Sentinel
    • Splunk Cloud
• Compliance
  • HIPAA
  • GDPR
  • SOC 2 Type 2
• SonicWall Support
  • About This Document

Google Apps (SAML 2.0)

This article describes the two ways to set Google Suite as your identity provider: using Google Service or using Google SAML applications.

• Configuring Google Suite as your IdP using SAML
• Configuring SonicWall

When choosing one over the other please keep in mind:

• While (at the moment) a SAML integration does not lead to any additional costs on Google's side, applying this configuration using Google Services may increase your Google Suite pricing, depending on your Google customer tier.
• A SAML integration enables you to force all users to authenticate using Google Suite, as opposed to setting up a Google Service which is more flexible and can be applied to particular groups of users only.

Configuring Google Suite as your IdP using SAML

Configuring the app at the G suite management console

1. Open the G Suite management console.

2. Select Apps.
   

   

3. Select Add custom SAML app.

   

4. Enter an indicative name of your own choice.
   

   

5. Copy the SSO URL and download certificate, then select next.
   

   

6. Enter the desired name, description, and logo.
   

   

7. Fill in the following information:

   • ACS URL : https://auth.sonicwalledge.com/login/callback?connection=tenantname-oc
   • Entity URL : urn:auth0:sonicwall-production:tenantname-oc
   • Make sure to replace tenantname with your tenantname (for example, if you log in to the platform using myworkspace.sonicwalledge.com, replace {{WORKSPACE}} with my workspace )
   • Name ID: Basic Information and Primary Email
   • Name ID Format: UNSPECIFIED

   

8. Fill in the following attributes then select add mapping:

   Basic Information/Primary email: email
   Basic Information/Last Name: family_name
   Basic Information/First Name: given_name
   Employee Details/Department: groups

   

9. Once the application has been created select Status, and then turn it on for everyone.

   
   

Configuring SonicWall CloudEdge

You need to configure the integration from the SonicWall CloudEdge side.

1. Log in to your Management Platform, navigate to Settings, and then Identity Providers.

2. Select + Add Provider.
3. Select Okta Identity Cloud.
4. Fill in SSO URL.
5. Add your organization domain.
6. Paste the certification (begin and end line included).

6. Select Done.