How do I set up single sign on for Google with Securly?

Securly supports single sign on with Google that makes the sign-in process easier for your users while allowing Securly to filter content appropriately.

You can set up Google AD SSO with Securly if you are a Securly DNS Customer with Windows Server 2008R2 and above.

Prerequisites

1. Google Cloud Directory  Sync (GCDS) to sync your AD installation with Google Workspace in the cloud.
2. IIS server on the local intranet that runs on Windows Server 2008R2 and above.
3. Active Directory username that matches the first part of the Google email address.
4. All Windows and Mac machines have joined the domain.
5. "Force login" is enabled in Securly’s Global Settings. 

Note: It is not recommended to install Securly AD SSO on a server already running an IIS.

Install

Note: You will need to allow the execution of unsigned scripts.

1. Download and unzip the Securly Google AD SSO.zip
2. At the Elevated/Administrative PowerShell, enter: "Set-Execution Policy Unrestricted "
3. Then run the "setup.ps1" from the correct folder matching your OS.
4. The script will install IIS, Enable Windows Authentication & set permissions.
5. Once deployed, verify that the site and file are accessible from clients on your network in this format: http://hostname/securlysso/debug.aspx (Hostname is preferred because of intranet zone settings for authentication. If you are using the FQDN, additional security settings may need to be changed for your browser.)

No dots (No FQDN) can be used in the IIS server path.

Enable AD SSO in the Securly UI

1. Log in to Securly Filter.
2. Navigate to the Policy Editor > Global Settings > Enable active directory single sign-on.
3. Toggle the switch to Enable Active Directory single sign-on. This will open the intranet address field.
4. Input your intranet address (http://hostname/securlysso) and click on 'Save'.
5. If you have more than one Active Directory domain, add each additional domain set and click 'Add more.' 
   

Note: If you have several Google Workspace domains, you may enter multiple mappings, but all should point to your Active Directory domain.