How to setup Google SSO without using webStore or SAML

How to setup Google SSO without using webStore or SAML


Problem:  You do not want to deploy Google Apps SSO with SAML or using webStore tiles.  The below solution will show how to manually make SSO definitions, so you can change the default input values to LDAP attributes or allow you to have tiles outside the webStore/MyTiles.


Prerequisite(s):
  • Unified Workspace version 6.4.5.13 or higher
  • webPass installed in Chrome/IE/Firefox
  • General knowledge of creating link, lockbox and form objects
  • Make sure to delete any My Tiles Google tiles



Solution(s):  Manually create links, lockboxes and webPass forms. There are two forms because there are two different login pages for Google - 1. For someone who has never logged into Google or 2. For anyone who has logged in before it will show a list of users that have logged in before.  Since the login pages for all Google Services is relatively the same, we use a wildcard .* so we only need 2 SSO forms for all tiles.


If you are not using LDAP attributes, then create Google Apps lockboxes:
  1. Go to webAdmin then Applications Admin
  2. Create a Google User ID lockbox
  3. Create a Google Password lockbox



Create Google Drive link:
  1. Go to webAdmin then Link-Menu Admin
  2. Create a new link under your desired menu
  3. Standard URL = https://drive.google.com/ (or equivalent Google service)
  4. Enter URL of image on Options tab - /images/appselector/Lenovo_GoogleDrive150x150.png
  5. Disable the webPass Credential Prompt on the Options tab
  6. Disable Cleanup Window on the Options tab



Create Google Sign-in form (default):

  1. Go to webAdmin then Application Admin
  2. Create a new form object
  3. Form Type  as "webPass"
  4. Login URL = https://drive.google.com/ (or equivalent Google service)
  5. Trigger URL = https://accounts.google.com/signin.*
  6. Login Page Launch = Enabled
  7. Form Identifier = 0
  8. Enter 2 form inputs called "identifier"  and "password", which should equal the lockbox or LDAP attributes
  9. Enter Script
  1. function pageOne(){ document.getElementById("identifierId").value = "@@enc:REPLACE ME@@"; document.getElementById("identifierNext").click();}
  2. function pageTwo(){ document.getElementsByName("password")[0].value = "@@enc:REPLACE ME@@"; document.getElementById("passwordNext").click();}
  3. if(document.getElementById("identifierNext")){ pageOne();setTimeout(pageTwo, 1000);} else {setInterval(pageTwo, 1000);}
      10. Assign users
      11. Click Save button



Create Google Choose Account form:

  1. Go to webAdmin then Application Admin
  2. Create a new form object
  3. Form Type  as "webPass"
  4. Login URL = https://drive.google.com/ (or equivalent Google service)
  5. Trigger URL = https://accounts.google.com/Service.*
  6. Login Page Launch = Enabled
  7. Form Identifier = 0
  8. Enter 2 form inputs called "identifier"  and "password", which should equal the lockbox or LDAP attributes
  9. Enter Script:
  1. function pageTwo(){document.getElementsByName("password")[0].value = "@@enc:REPLACE ME@@";document.getElementById("passwordNext").click();} setInterval(pageTwo, 1000);
      10. Assign users
      11. Click Save Button