Skip to main content
日本語 简体中文 繁體中文

[Access Control] Chromebook Single Sign-On (SSO) Connection Procedure

Target

  • Single Sign-On (SSO) integration between Access Control and Google Workspace is in place.
  • Customers who perform Single Sign-On (SSO) with Chromebook device profile login

Purpose

  • Configure Single Sign-On (SSO) for Access Control and Chromebook device profile login, enabling profile login to Chromebook via HENNGE Access Control.

Notes

  1. A Chrome Enterprise license is required to perform this configuration.
  2. Information for a privileged administrator account in the Google Workspace tenant (Username and Password) is required.
  3. Before performing this task, ensure that you have completed the [Access Control] Single Sign-On (SSO) Connection Procedure (Google Workspace).
  4. Google Workspace accounts with privileged administrator rights are excluded from Single Sign-On (SSO).
    https://support.google.com/a/answer/6341409?hl=en-us
  5. Depending on your contract, there may be some differences between the screenshots and the actual product screens.
  6. The content of this article is based on the product as of June 2025 and may change without notice thereafter.
  7. For the overall installation flow of the Device Certificate, please refer to the following article.
    [Device Certificate] Installation Procedure List

Procedure

User and Browser Settings

1. Access the Google Workspace Admin Console [Devices].

2. Go to [Chrome] - [Settings] - [Users & Browsers].

3. Change the following settings under [Security].

・Single Sign-On: "Enable SAML-based Single Sign-On for Chrome devices"

4. Click [Save] at the top right to save the settings.

Device Settings

1. Access the Google Workspace Admin Console [Devices].

2. Go to [Chrome] - [Settings] - [Devices].

3. Change the following 3 settings under [Login Settings].

・Single Sign-On ID Provider (IdP) Redirect: "Allow users to navigate to the SAML SSO IdP page"

・Single Sign-On Cookie Behavior: "Enable the transfer of SAML SSO cookies to user sessions during login"

・Single Sign-On Client Certificate:
When using HENNGE One

{"pattern":"https://verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Public CA G3h"}}}

When using HENNGE One for Education

{"pattern":"https://verify.ssso.hdems.com","filter":{"ISSUER":{"CN":"Cybertrust DeviceiD Education CA G3h"}}}

Example: When using HENNGE One

4. Click [Save] at the top right to save the settings.

Operation Check

Refer to the following article to verify the connection.
[Access Control] Chromebook Single Sign-On (SSO) Connection Verification

Reference Articles