Google SSO not working - "Request cancelled" "Service unavailable; try again later ()."

Products

• Cloud Secure Web Gateway
• Web Isolation Cloud

Issue/Introduction

Cloud SWG users are facing session persistence issues; after authenticating with Google, they are prompted to log in again or are denied access to services like YouTube and Google Docs. Seen error messages are:

• "Can't sign in to [email protected]. Request cancelled"
• "Can't sign in to [email protected]. Service unavailable; try again later ()."

Environment

Cloud SWG is integrated with Cloud WI

Cloud SWG policies have been defined with a bottom "catch all" "Isolate" policy rule

Cause

Needed Google's SSO resources are forwarded to the Cloud WI tenant and rendered in a different isolated session than the local one where the user is already logged in

Resolution

Set up a Cloud SWG rule to bypass from isolation the following Google's SSO needed hosts:

• accounts.google.com
• googleapis.com
• gstatic.com
• googleusercontent.com
• ssl.gstatic.com
• apis.google.com