Cloud Secure Edge Docs

CSE Home> Public Applications> Google Workspace

Home

Learn Cloud Secure Edge

What is Cloud Secure Edge?

Get Started

Quickstart
Solutions
Platform Components

Secure Resources

Networks
Private Resources
Public Applications
- IP Allowlisted SaaS Apps
- IdP Federated SaaS Apps
Internet Traffic
Trust Scoring

Manage Access Policies

Access Policies
Content Policies
- Internet Threat Protection

Manage and Monitor Your Org

Manage Users and Devices
Manage Admins
Visibility and Logging

More Resources

Changelog
API Guide
Cloud Secure Edge Labs
Licenses
- Editions Licenses

IdP Federation for Google Workspace Zero Trust Policy Enforcement

Federate Google Workspace to SonicWall Cloud Secure Edge (CSE) so Google delegates sign-in to the CSE policy engine, enforcing device trust and zero trust policy before Google completes authentication to SaaS applications

Updated On: Aug 13, 2026

Cloud Secure Edge Docs

IdP Federation for Google Workspace Zero Trust Policy Enforcement

Overview #

Why use CSE as the identity provider for Google Workspace #

Prerequisites #

Step 1: Create the IdP-Routed Application in CSE #

Step 2: Add CSE as a Third-Party SSO Profile in Google Workspace #

Step 3: Prevent Lockout and Redirect Loops #

Step 4: Route a Pilot Population (Recommended) #

Verify the Sign-In #

Step 5: Route All Users #

Additional Configurations #

Expected Behaviour #