[JIRA] (IDP-1977) IDP and Google Workspace

[Rui Ribeiro (Jira)]

Rui Ribeiro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=62d6fd351834ae63caf7f797 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiMzRlNzkyNmY1M2FlNDRjMGEwOGIwMWE5NjE2YWNkNjciLCJwIjoiaiJ9 ) / Documentation ( https://shibboleth.atlassian.net/browse/IDP-1977?atlOrigin=eyJpIjoiMzRlNzkyNmY1M2FlNDRjMGEwOGIwMWE5NjE2YWNkNjciLCJwIjoiaiJ9 ) IDP-1977 ( https://shibboleth.atlassian.net/browse/IDP-1977?atlOrigin=eyJpIjoiMzRlNzkyNmY1M2FlNDRjMGEwOGIwMWE5NjE2YWNkNjciLCJwIjoiaiJ9 ) IDP and Google Workspace ( https://shibboleth.atlassian.net/browse/IDP-1977?atlOrigin=eyJpIjoiMzRlNzkyNmY1M2FlNDRjMGEwOGIwMWE5NjE2YWNkNjciLCJwIjoiaiJ9 )

Issue Type: Documentation Assignee: Unassigned Created: 19/Jul/22 10:15 PM Priority: Trivial Reporter: Rui Ribeiro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=62d6fd351834ae63caf7f797 )

We are working to integrate IDP with Google Workspace. The general configuration works properly and we can authenticate. As you can imagine, this integration is made directly between IDP and Google.

We are facing with the following problem: in CAFe we allow authentication from personal accounts (natural person) but the CAFe members need to authenticate non-personal accounts (ex.: support at university.edu ( support at university.edu.br ) , contact at university.edu ( contact at university.edu.br ) , etc.) in Google Workspace.

In other contexts, we recommend to put the personal and non-personal accounts in different directory OUs and we configure the IDP to authenticate only in the OU with personal accounts. But in the current context it doesn't work because we need to authenticate the non-personal accounts.

Do you see some way to deal with this situation? I thought about some filter based on the relying party but I'm not sure this is feasible.

( https://shibboleth.atlassian.net/browse/IDP-1977#add-comment?atlOrigin=eyJpIjoiMzRlNzkyNmY1M2FlNDRjMGEwOGIwMWE5NjE2YWNkNjciLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1977#add-comment?atlOrigin=eyJpIjoiMzRlNzkyNmY1M2FlNDRjMGEwOGIwMWE5NjE2YWNkNjciLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100202- sha1:51b939c )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220720/cbeb60ef/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-0969b79d-6972-48cb-ac19-c5607e416586
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220720/cbeb60ef/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-6827079c-1cb5-4bb0-9668-97f9fffb03b5
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220720/cbeb60ef/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-4f7a2943-ea53-4ea6-89cb-0995240a7e66
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220720/cbeb60ef/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-764146fc-487c-40d4-97e0-40249a28a32f
Type: image/png
Size: 304 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220720/cbeb60ef/attachment-0007.png>