Configure Google G Suite for SAML/SSO

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

How to configure Google G Suite for CB Defense's SAML/SSO.

Environment

• CB Defense Web Console: All Version
• Google G Suite SAML/SSO

Resolution

Under the Service Provider Details configuration page on Google's G Suite Setup, the following fields can be filled out as:

1. ACS URL: This is the ACS (Consumer) URL from the SAML/SSO Modal Window in the CB Defense Console
2. Entity ID: This is the Audience URL from the SAML/SSO Modal Window
3. Start URL: Okay to leave blank
4. Signed Response: Not Checked
5. Name ID/Name ID Format: These need to be set to a custom setting, with the User Identifier set to 'mail'

Additional Information

• G-Suite is not a supported SAML/SSO provider for CB Defense, and this guide is provided as a best effort for an unsupported configuration.