ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 146 - Professional Google Workspace Administrator discussion

Report
Export

You have configured SSO using a third-party IDP with your Google Workspace domain. An end user has reported that they cannot sign in to Google Workspace after their username was changed in the third-party SSO product. They can sign in to their other internal applications that use SSO. and no other users are experiencing issues signing in. What could be causing the sign-in issue?

A.
The SAML assertion provided by the third-party IDP is presenting a username that conflicts with the current username configured in Google Workspace.
Answers
A.
The SAML assertion provided by the third-party IDP is presenting a username that conflicts with the current username configured in Google Workspace.
B.
The user's Google password was changed administratively, which is causing a sign-in failure.
Answers
B.
The user's Google password was changed administratively, which is causing a sign-in failure.
C.
The issued certificate for that user has been revoked and must be updated before the user can have another successful sign in.
Answers
C.
The issued certificate for that user has been revoked and must be updated before the user can have another successful sign in.
D.
The SAML assertion is providing the user's previous password attached to their old username.
Answers
D.
The SAML assertion is providing the user's previous password attached to their old username.
Suggested answer: A

Explanation:

The sign-in issue arises because the SAML assertion provided by the third-party IDP is presenting a username that conflicts with the current username configured in Google Workspace. When a username is changed in the third-party IDP, it must be synchronized with Google Workspace. If this synchronization does not happen, Google Workspace will not recognize the updated username and will prevent the user from signing in.

Verify that the username in the SAML assertion matches the username in Google Workspace.

If there is a mismatch, update the username in Google Workspace to match the SAML assertion.

Ensure that future changes in the third-party IDP are reflected in Google Workspace.

Google Workspace Admin Help: Troubleshoot single sign-on

asked 18/09/2024
Wilker Aguiar
46 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first