topic Re: cloudpath slip users with google byon in Cloudpath Enrollment System (ES)

cloudpath slip users with google byon

francisco_barre — Tue, 09 Oct 2018 16:33:17 GMT

How can I separate the users that log in via google in cloudpath, if I want to identify them from the employees and the guests, they all enter with google.

Re: cloudpath slip users with google byon

DaveB — Tue, 09 Oct 2018 17:20:24 GMT

depending on how your users are being managed in Google, you can perform a split based on the email address. if you have google hosting your email domain, you can do a google login step, then create a step that calls a split based on the received email address. "@mycompany.com" splits to a workflow where you provide a certificate, "@gmail.com" splits to a guest workflow.

make sure to inform your employees to use their work email address to login, not their personal or @gmail.com address. there isn't really a way to differentiate within the same email domain if they are using personal email addresses, although you could also email them a voucher prior to performing the onboarding (assuming you have a list of employee email addresses) and then require the voucher as a step in the employee split.

Re: cloudpath slip users with google byon

abhi_maras — Wed, 10 Oct 2018 02:45:38 GMT

In addition to what Dave mentioned, if you are using Gsuite and/or have gmail domain, starting Cloudpath 5.4 (ETA in Dec) you can look at group membership and distinguish the users over SAML auth.

Re: cloudpath slip users with google byon

alex_2dsb26tkdv — Wed, 02 Jan 2019 04:55:28 GMT

Is Okta supported as an iDP via SAML auth?