Ideas for Arc XP

Allow sp initiated login in the GSuite-Okta-Arc SAML-SSO setup

Now we are using GSuite-Okta-Arc SAML-SSO 
(i.e. SAML IdP=GSuite, SP=Arc)

But only the IdP-initiated login can be used now, but not the SP-initiated login

 

I guess that GSuite (as IdP) supports SP-initiated-login with Okta, because:

Ref #1: https://saml-doc.okta.com/SAML_Docs/How-to-Enable-SAML-2.0-in-Google-Apps.html
 - "The Okta/G Suite SAML integration currently supports the following features:

  • SP-initiated SSO
  • IdP-initiated SSO"

Ref #2: https://support.okta.com/help/s/article/Google-Apps-Deployment-Guide
 - "G Suite SAML configuration supports both Service-provider (SP) initiated and Identity-provider (IDP) initiated SAML negotiation."

  • Jones Chan
  • Feb 22 2019
  • Shipped
  • Attach files
  • Gregory Engel commented
    13 Jan, 2021 06:06pm

    Hi everyone,

    This is now supported. Please see Configuring Arc to work with Google Workspaces for more information.

  • Gregory Engel commented
    6 Apr, 2020 01:43am

    Hi Jones,

    I don't fully understand the ask here. It sounds like the goal that a user can attempt to access Arc Publishing and be redirected back to the GSuite login, and then resume accessing the intended destination within Arc. Is that correct?

    Please elaborate on this if you can. Thank you!