Google Workspace Changes

A more secure sign-in flow on Chrome

After signing in on a SAML provider’s website, users will be brought to a new screen on accounts.google.com to confirm their identity. This screen will provide an additional layer of security and help prevent users from unknowingly signing in to an account created and controlled by an attacker.

Introduction of a secure sign-in confirmation screen for SAML users on Chrome.

Starting May 7th, 2018, users who utilize SAML to sign in to G Suite services via the Chrome browser will see an additional identity confirmation screen on accounts.google.com after authenticating with their SAML provider. This security layer is designed to protect users from phishing attacks that attempt to silently sign them into accounts controlled by attackers. The screen is shown once per account per device and can be disabled by administrators using the X-GoogApps-AllowedDomains HTTP header via the AllowedDomainsForApps group policy.