Google Workspace Changes

New curated categories added to Google Workspace Marketplace

Google has introduced three manually curated categories to the Google Workspace Marketplace: Business essentials, Work from everywhere, and Apps to discover. To facilitate navigation to these new categories, a left navigation menu has been added.

Assign SSO profile to organizational units or groups with the new SAML Partial SSO beta

Now, you have the option to specify groups or organizational units (OUs) to authenticate a subset of your users using Google. This feature is available beginning today as an open beta, which means you can use it without enrolling in a specific beta program.

Apply context-aware access policies to mobile and desktop applications

Admins can now assign existing or new context-aware access levels to Google desktop and mobile applications.

Introducing two BeyondCorp Alliance partner integrations for improved context-aware access

We’re announcing new integrations with our BeyondCorp Alliance partners Check Point and Lookout.

Streamlined and intuitive app management in the Admin console with new unified experience

We’re creating a single place to manage web and mobile apps in the Admin console.

A single place to manage web and mobile apps in the Admin console.

We’re creating a single place to manage web and mobile apps in the Admin console. With the new location, we’ll also be updating the management interface to be more consistent and intuitive. You’ll find this at Admin console > Apps > Web and mobile apps. There, you’ll be able to see configured apps, search apps, add apps, manage user access, adjust settings, and more for Android apps, iOS apps, and SAML apps.

Simplify management of company-owned iOS devices with new Apple Business Manager integration

We’re launching an integration between Google endpoint management and Apple Business Manager (formerly the Device Enrollment Program, or DEP).

Context-Aware Access for SAML apps available in beta

We’re enhancing Context-Aware Access (CAA) with a beta that enables admins to use it to control SAML apps.

New data exfiltration protections for G Suite data on iOS devices.

Google has introduced new security controls for admins to prevent the exfiltration of corporate data on iOS devices. Admins can now restrict the ability to copy and paste data from G Suite accounts to other accounts and restrict dragging and dropping files from specific G Suite apps, including Gmail, Drive, Docs, Sheets, and Slides. This feature is available to G Suite Enterprise, G Suite Enterprise for Education, and Cloud Identity Premium customers.

Suspension of the turn-off for less secure app (LSA) access to G Suite accounts.

Google has suspended the scheduled turn-off of less secure app (LSA) access to G Suite accounts, which was originally planned for June 15, 2020. This suspension is intended to minimize disruptions for organizations managing remote workforces during the COVID-19 pandemic. Google recommends that administrators migrate to OAuth authentication and assures that a 12-month window will be provided once the turn-off timeline is restarted.

Less secure app turn-off suspended until further notice

Suspending the less secure app (LSA) turn-off until further notice. All previously announced timeframes no longer apply.

Expanded browser support for enrolling security keys on Android and MacOS.

Google is making it easier to enroll security keys on Android and MacOS devices by allowing additional web browsers for initial registration. Users can now register security keys on Android devices running Android 7.0 and up using Chrome version 70 and up, and on MacOS devices using Safari version 13.0.4 and up. This applies to both independent registrations and those within the Advanced Protection Program for enterprise.

Enroll security keys on more devices

Making it easier to enroll security keys on Android and MacOS devices by making it possible to use additional web browsers to initially register the security keys to your account.

Use groups to manage Context Aware Access for G Suite

You can now use groups to manage context-aware access for your organization. You could previously only manage them by organizational unit (OU).

Improving data regions with expanded coverage and group-based admin controls

Enhancing data regions with three key updates: Coverage of user indices for Gmail and Calendar, Coverage of Google Keep primary data at rest and backups, and More granular group-based controls.