Google Workspace Changes

Introduction of a secure sign-in confirmation screen for SAML users on Chrome.

Starting May 7th, 2018, users who utilize SAML to sign in to G Suite services via the Chrome browser will see an additional identity confirmation screen on accounts.google.com after authenticating with their SAML provider. This security layer is designed to protect users from phishing attacks that attempt to silently sign them into accounts controlled by attackers. The screen is shown once per account per device and can be disabled by administrators using the X-GoogApps-AllowedDomains HTTP header via the AllowedDomainsForApps group policy.

Additional changes for customers using a third-party SSO provider when accessing third-party applications that use OAuth

If you’re using a third-party SSO provider to access third-party applications, your G Suite users will see an additional account selection page when they log in. This page will make it clear to them which account they’re authenticating, as well as the permissions they’re granting to applications.

If you’re a current Google Apps customer, we’re making it easier than ever to set up Chrome device management for managing employee Chrome devices — directly from your Admin console.

With Chrome device management, you can manage and configure more than 200 features and settings for your Chrome device fleet (and you can buy devices from our Chrome Store).

New Chrome policies and improvements added to the Google Apps Admin console.

The Google Apps Admin console has been updated with new Chrome policies and enhancements to the device details page. Admins can now autocomplete the default domain for user logins and enable asset identifiers during the enrollment process. Additionally, a new 'System Activity and Troubleshooting' section has been added to the device details page, providing admins with 'Reboot Device' and 'Screen Capture' options for devices running version 44 or above.