Setting up Google Apps SSO

[Cantor, Scott]

>I know this has been done, so hoping some of you on here have managed it.
> 
>I¹ve been given the admin login, and the domain is verified. What I can¹t
>figure out is:
>-         
>What the signin page and signout page URLs should be

Because those aren't SAML terms, so their approach to this sucks.

If by signin page, they mean the SSO service endpoint, that depends on the
binding. The Redirect binding endpoint is at
/idp/profile/SAML2/Redirect/SSO

There is no fully workable logout support. The information on logout in
the wiki is in the IdPEnableSLO topic.

>Should the idp.crt (based on when we last updated the IdP) in
>idphome/credentials be the file I upload to them?

Probably.

-- Scott