Configuring SAML SSO for GSuite

Prerequisites:

• GSuite Admin Console Access
• AmZetta zGateway with Public DNS name and valid SSL Certificate
• zGateway management console using Security Officer Account
• Shell Access to zGateway

Configurations

Setting up GSuite in zGateway (Identity Provider):

1. Login with a digital certificate in zGateway using a Security Officer Account.
2. Go to “Access Management > Applications > Add”.
3. Click the Add button to create a new application as “google”.
4. Add google app into New/Existing Application Group(s).
5. Create/Update an “Application Access” in New/Existing “Access Controls”.
6. Verify SAML SSO Certificate in zGateway. (Ensure the following files are available in zGateway)
7. Copy the content of SAML SSO Certificate SAML_Signing_Certificate. (Ensure while copying the content that there are no new lines in the SAML SSO Certificate)

Setting up GSuite in zGateway (Service Provider):

1. Go to Google Admin Console (https://admin.google.com/u/1/?pli=1) and login with Administrator Access.
2. Select “Security” from the Admin Console.
3. Select “Set up single sign-on (SSO) with a thrid party LdP”.
4. Configure zGateway server details as seen below.