Skip to main content
日本語 简体中文 繁體中文

[Access Control] Chromebook Single Sign-On (SSO) Connection Procedure

Description

This article explains the required configuration procedure in the Google Workspace Admin console to integrate Access Control with Google Workspace and enable Single Sign-On (SSO) for Chromebook profile logins.

Notes

  1. A Chrome Enterprise (external link) license is required for this configuration.
  2. Google Workspace tenant super admin account information (username and password) is required.
  3. Before proceeding, make sure to complete [Access Control] Single Sign-On (SSO) Connection Procedure (Google Workspace).
  4. Google Workspace accounts with super admin privileges are excluded from Single Sign-On (SSO). For details, refer to Google Workspace admin login restrictions (external link).
  5. Depending on your contract, the actual screen display may differ from the examples shown.
  6. For Device Certificate deployment procedures, refer to [Device Certificate] Deployment Procedure List.
  7. The content of this article is based on product specifications as of May 2026 and is subject to change without notice.

Procedure

User and Browser Settings

  1. From the left menu of the Google Workspace Admin console, go to [Devices] – [Chrome] – [Settings].
  2. Open the [User & browser settings] tab.

  3. In [Security], configure the following item:

    • Single Sign-On: "Enable SAML-based Single Sign-On for Chrome devices"

  4. Click [Save] in the upper right to save your settings.

Device Settings

  1. From the left menu of the Google Workspace Admin console, go to [Devices] – [Chrome] – [Settings].
  2. Open the [Device settings] tab.
  3. In [Login settings], configure the following three items:
    • Single Sign-On IdP redirect: "Allow users to go to the SAML SSO IdP page"
    • Single Sign-On cookie behavior: "Enable transfer of SAML SSO cookies to user sessions during login"

    • Single Sign-On client certificate:

      If using HENNGE One

      {"pattern":"https://verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Public CA G3h"}}}
{"pattern":"https://[*.]verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Public CA G3h"}}}

{"pattern":"https://[*.]verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Public CA G4"}}}
{"pattern":"https://verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Public CA G4"}}}

      If using HENNGE One for Education

      {"pattern":"https://verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Education CA G3h"}}}
{"pattern":"https://[*.]verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Education CA G3h"}}}

{"pattern":"https://verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Education CA G4"}}}
{"pattern":"https://[*.]verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Education CA G4"}}}
  4. Click [Save] in the upper right to save your settings.

Operation Check

  1. Refer to the following article to verify the connection.

    [Access Control] Chromebook Single Sign-On (SSO) Connection Verification

Reference