CB Defense: How to Configure Google G Suite for SAML/SSO

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

To configure Google G Suite for CB Defense's SAML/SSO.

Environment

• CB Defense Web Console: All Version
• Google G Suite SAML/SSO

Resolution

Under the Service Provider Details configuration page on Google's G Suite Setup, the following fields can be filled out as:

1. ACS URL: This is the ACS (Consumer) URL from the SAML/SSO Modal Window in the CB Defense Console
2. Entity ID: This is the Audience URL from the SAML/SSO Modal Window
3. Start URL: Okay to leave blank
4. Signed Response: Not Checked
5. Name ID/Name ID Format: These need to be set to a custom setting, with the User Identifier set to 'mail'

Additional Information

• G-Suite is not a supported SAML/SSO provider for CB Defense, and this guide is provided as a best effort for an unsupported configuration.
• For assistance in configuring the settings on the CB Defense Web Console side, please see: https://community.carbonblack.com/t5/Knowledge-Base/CB-Defense-How-to-Enable-SAML-Integration-in-the-PSC-Console/ta-p/47282