Using Azure Arc for SSO on Gmail

Muhammad Shoaib Arain 0 Reputation points
2025-01-28T07:34:33.25+00:00

We want to implement SSO between Local Domain, Azure and, Gmail/Gsuite. The SSO between Local domain and Azure can be done using Azure Connect. For the Gmail/Gsuite, I have found out that we can use Micorsoft Entra tenant as the Identity Provider.

This option is available under Microsoft Entra Admin Center/Applications/Enterprise Applications.

I need help to configure SSO for Gmail/G-suite using Microsoft Identity Provider. Kindly help if anyone is using this option and any issues being encountered.

Please also mention if any reliable third-party tools are available to achieve SSO.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,145 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Janaki Kota 540 Reputation points Microsoft Vendor
    2025-01-29T12:35:53.62+00:00

    Hello @Muhammad Shoaib Arain,

    Thank you for reaching out Microsoft Q&A. 

    We understand that you want to implement SSO between Local Domain, Azure and Gmail/Gsuite. As a part of this you are looking for help on configuring SSO for Gmail/G-suite using Microsoft Identity Provider.  

    As a first step, you need to add Gmail/Gsuite from the gallery. 

    1. Browse to Identity > Applications > Enterprise applications > New application

    In the Add from the gallery section, type Google Cloud / G Suite Connector by Microsoft in the search box. 

    Select Google Cloud / G Suite Connector by Microsoft from results panel and then add the app. Wait a few seconds while the app is added to your tenant. 

    Once the application is added in the gallery, you can follow the below steps to configure SSO. 

    Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator

    Browse to Identity > Applications > Enterprise applications > Google Cloud / G Suite Connector by Microsoft > Single sign-on

    On the Select a single sign-on method page, select SAML

    On the Set up single sign-on with SAML page, click the pencil icon for Basic SAML Configuration to edit the settings. 

    Edit Basic SAML Configuration

    On the Set up single sign-on with SAML page, in the SAML Signing Certificate section, find Certificate (Base64) and select Download to download the certificate and save it on your computer.

    Kindly refer the document for more information: https://learn.microsoft.com/en-us/entra/identity/saas-apps/google-apps-tutorial

    Hope this helps. Do let us know if you any further queries.

    Thanks & Regards

    Janaki Kota


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.