Businesses use Single Sign-On to enforce uniform enterprise authentication and authorization policies across the enterprise. It improves user experience, eases account management, and reduces password fatigue.
Single Sign-On
With Single Sign-On (SSO), users can log in to one platform, and then they are allowed to sign in to other applications automatically, across any mobile, web, and desktop the user is using. SAML 2.0 allows users to sign in with G Suite by eliminating user-managed passwords and the reduces the risk of phishing.
G Suite
G Suite is a cloud-based productivity suite that helps teams connect and get work done from anywhere on any device. It’s simple to set up, use, and manage, allowing you to work smarter and focus on what really matters.
42Gears UEM now supports G Suite with Single Sign-On using which IT Pros can access SureMDM Web Console using G Suite credentials with SSO. It adds an extra layer of security to the account. This feature will eliminate the need to create users separately in 42Gears UEM.
Configure SureMDM with G Suite
To configure devices using G Suite credentials with SSO, follow the steps below:
1. Login to https://admin.google.com with G Suite credentials.
2. Click Apps.
3. Click SAML apps.
4. Click Setup My Own Custom App.
5. On the Google IDP Information prompt, copy SSO URL, Entity ID, and Certificate and click Next. Click Download to download the certificate.
Note: SSO URL, Entity ID, and Certificate details are required while configuring SSO in SureMDM.
6. Enter Application Name and select the logo file in Upload Logo and click Next.
7. Enter ACS URL and Entity ID and click Next.
Example for ACS URL :
https://suremdm.42gears.com/console/ssoconsumer/xxxx
Note: Add your SureMDM DNS name and Account ID as
https://<DNS Name>/console/ssoconsumer/<account id>
and urn:42gears:suremdm:SAML2ServiceProvider
8. Click Finish.
9. Click OK.
10. Click Edit Service.
11. Select ON for everyone and click Save.
Changes on SureMDM Server:
1. Login to SureMDM Web Console.
2. Go to Settings > Account settings > Single Sign-On.
3. Enable Single Sign-On and select SSO Type G Suite from the dropdown list.
4. Enter Service Identifier, Sign-On Service URL, and Logout Service URL, which is copied from Step No. 6 in Google IDP Information Tab.
Assign Roles, Device Group Set, and Jobs/Profiles folder set.
Example:
Service Identifier – https://accounts.google.com/o/saml2?idpid=C02rpwdi1
Sign-On Service URL- https://accounts.google.com/o/saml2/idp?idpid=C02rpwdi1
Logout Service URL- Generally same as Sign-On Service URL
5. Click on Upload Certificate and upload the certificate which is downloaded in Google IDP information Tab in Step no 6 and click on Ok.
Note: Ensure that the password field empty.
6. Click Done.
Once finished, IT Pros can login to G Suite account with any browser and use the URL below to login to the 42Gears SureMDM server.
For example https://suremdm.42gears.com/console/ssologin/0617240
Note: Enter your SureMDM DNS name and Account ID as https://console/ssoconsumer/account ID.
Click to learn more on how to manage Android devices in a G Suite account through Dedicated Devices (formerly called COSU or Corporate-Owned Single-Use) and BYOD profiles with 42Gears UEM.
For more details on our products, click here
If you need further assistance, please submit a ticket here