How to configure single sign-on for ChromeOS devices

Problem

How can you configure Single Sign-on (SSO) in ChromeOS devices?

Environment

  • Chrome OS
  • Login

Solution

  1. Set up SSO. If you haven’t already, set up single sign-on for managed Google Accounts using third-party Identity providers.
  2. Test SSO
    • Set up and test SAML SSO on a test domain you own. If you don’t have a test domain, test SAML SSO with a small number of users by creating a test group and enabling SSO for users only in that group. After testing SAML SSO with a small number of users, roll it out to approximately 5% of your users.
  3. In the Admin console, go to Menu > Devices > Chrome > Settings. The User & browser settings page opens by default.
  4. If you signed up for Chrome Browser Cloud Management, go to Menu > Chrome browser > Settings.
  5. To apply the setting to all users and enrolled browsers, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  6. Go to Security.
  7. Click Single sign-on.
  8. Select Enable SAML-based single sign-on for Chrome devices.
  9. Click Save.
Please refer to Configure SAML single sign-on for ChromeOS devices to find further information and details about optional steps.