SSO with multiple Google domains

[Andrew Morgan]

On Thu, 2 Nov 2017, Knape, Dean M. wrote:

> Andy,
>
> I'm talking about a single instance with multiple domains registered.  In
> your case, email to either of the defined addresses delivers to a single
> mailbox.  This is effectively what we have now, which is turning into some
> very difficult to resolve use cases.

You can assign users to only one domain, if that's what you want.  For 
example:

   User: bob at domain1.com

   User: sally at domain2.com

Store the correct username for your user in the googlePrincipalName LDAP 
attribute and return it to Google in the SAML response.

Is there some detail I'm not considering?  This seems like a simple 
problem of attribute mapping in the IDP.

Thanks,
 	Andy