Enable SAML App for a group of users in G-Suite using Organization
-
Follow See Google Idp for SAML Integration to create a SAMLVPN application.
-
Repeat the following steps to create users in G-suite Google Admin console and leave them under the root organization.
2.1. Go to G-suite Google Admin console, select Users.
2.2. Click Add new user.
2.3. Enter user information. In this example, Aviatrix Support is the root organization.
2.4. Click DONE.
-
Define a sub-organization saml access org within your root organization.
3.1. At G-suite Google Admin console, select Organizational units.
3.2. Click + to add a new organization under your root organization.
3.3 Create a sub-organization, e.g., saml access org.
-
Turn on SAMLVPN application for saml access org.
4.1. Go back to G-suite Google Admin console and select Apps.
4.2. Select SAML apps.
4.3. Select the SAMLVPN App created in step 1.
4.4. Click EDIT SERVICE to enable/disable SAMLVPN app for the selected organization.
4.5. Turn off SAMLVPN for root organization (Aviatrix Support).
4.6. Turn on SAMLVPN for saml access org.
-
Assign users to SAMLVPN app by moving users into saml access org.
5.1. Go back to G-suite Google Admin console and select Users.
![g-suite-admin-users](_images/g-suite-admin-console-users.png)
5.2. Select the user for SAMLVPN app (e.g., Dan Smith) and click Change organizational unit.
![change-org-button](_images/change-org-button.png)
5.3. Select saml access org.
![change-org-unit](_images/change-org-unit.png)
5.4. Confirm the change.
![confirm-org-change](_images/confirm-org-change.png)
5.5. Review the change.
![select-dan-smith](_images/select-dan-smith.png)
![reopen-2-confirm-org](_images/reopen-2-confirm-org.png)