SAML-plugin with Google Workspace?

[jr-m4]

Good morning

Anyone with a working SAML configuration that uses Google as the IdentityProvider? Looking more specifically to what to enter each of the field with (on both XO Source and the SAML-section on Google Workspace SAML app).

I tried somewhat yesterday, but couldn't really get it to work.

I'll be trying more during the week. But if someone could help out, it would be greatly apreciated.

PS: I've decided to not use the auth-google plugin. Since this requires to setup via the GCP-console. And I'd like to keep my SSO's consolidated in (mostly) one place.

[probain]

I've managed to get this working to a 93% satisfactory state. Techincally I get SAML working. However, when the login is authorized, it just kicks the user (me) back to the login page. However, manually going to the bare URL (https://xo.company.net), takes the login further.

I'm sharing sanitized screenshots below for how to get this to work. XO<->Google Workspace SAML.
@olivierlambert Maybe this can be of use to further flesh out the minimalistic section for SAML within the docs?

Sorry for the screenshots being huge. But they're better than nothing.

[olivierlambert]

@probain more doc on SAML will be very very welcome! Do you feel confident to provide a pull request with your changes?

[probain]

@olivierlambert If I could get a pointer as to which source-document we're talking about. Then yes, I could whip something up.

[olivierlambert]

https://xen-orchestra.com/docs/users.html#saml

At the bottom of the page, there's a link "Help us to improve this page!" that will automatically create a fork of the doc, so you can update it and then provide a Pull Request

[probain]

@olivierlambert
PR #7846

[olivierlambert]

Oh wow, that was fast! Thank you very much, I will check internally to be sure it will be reviewed soon