Configure Browser Access with Google Workspace

This document explains how to configure Google Workspace as your IdP to work with Browser Access to perform authentication in a browser.

To complete this procedure you need:

A basic understanding of SAML, like knowing the relation between the service provider (SP) and the identity provider (IdP).
A Google Workspace account. If you don’t have one, use these instructions to create one.
A Private App configured for Browser Access.

For more information about creating a SAML application in Google, go here.

First configure Google Workspace with a customized SAML application, finally end with the connecting of private app in the Clientless way.

In the Netskope UI, go to Settings > Security Cloud Platform > Reverse Proxy > SAML and click Add Account.
Enter a name and select Private Apps from the Application dropdown list.
Enter your Google Workplace SSO URL and certificate.
Click Save.
Click Network Settings beside the account name.
Copy the ACS URL and Audience URL.

Go back to Google Workspace , click Add App, and then click Add Custom SAML App.
Enter an App Name and click Continue.
On the next page just click Continue.
For ACS URL, enter the ACS URL from the Netskope UI. For Entity ID, enter the Audience URL from the Netskope UI.
Click Finish.

In a browser, go to the Public Host address for the Private App configured for Browser Access. To get the Public Host address, go to Settings > Security Cloud Platform > App Definition > Private Apps and click on your private app.
Use the Google Workspace account to authenticate and log in.