ISE SAML with Google IdP

[Greg Gibbs]

Google is not listed as a tested SAML IdP in the Release Notes for ISE 2.1.

Are there plans to test/validate Google IdP against either ISE 2.1 or 2.2?

We have a large retailer that has expressed interest in ISE, but they are moving to Google as an ID source for some specific groups.

[hslai · Accepted solution]

As ISE 2.1 supports SAML 2.0 generically, we are testing with a selective set of IdPs. Customers and partners are welcome to try any SAML 2.0 compliant IdPs themselves.

Please direct roadmap items to our product management team.

[howon]

Not sure if you are still looking at Google SAML Idp integration with ISE, but here is one you can use:

Google Suite Guest SSO (Single Sign On) with ISE via SAML for Chromebooks

[lul3]

Hi,

May I check if we tested the same (ISE with google SAML ldp) on Windows/Mac OS please?

[Greg Gibbs]

As per the ISE Admin Guide, SAML IdP is only supported for Portal-based authentications. It cannot currently be used in conjunction with 802.1x for endpoint authentication.

Cheers,

Greg

[lul3]

Thanks Greg!

[stayd]

After 3 years, do you know is there any change ?

[Greg Gibbs]

Similar question posted on another topic... SAML is browser-based, so it would require some significant updates to existing EAP protocols or a new EAP protocol to provide this functionality. This is not an ISE limitation, but rather an industry-wide limitation.

[Saied Ehsan Alavi Fazel]

Thanks for the post, can you clarify if the authenticatation domain is limitted to the G-Suite users or can authenticate against any google account?

The reason for asking is, my customer is looking to allow anyone with google account to be able to sing on into their guest WiFi, the above works well on my test lab with only users within my g-suite domain. I used a generic google account to sign on and getting 403 error: app_not_configured_for_user. (it may well be a configuration error, however before I go further, I wanted to check as if I am on the right track)

Any help is greatly appreciated.

[Jason Kunst]

Ise doesn't support Google accounts for guest wifi

Ise 2.3 just added Facebook as a social media provider

You would need to check with google if this could be extended