Choose an IdP for Google Workspace CSE

this section helps you select the {{idp}} that best fits your needs it also outlines key considerations when choosing between configuring the idp in google workspace by using a well known file or the admin console before proceeding to the main integration guide located at set up the external key service for google workspace cse docid 96uijalztz2pyfc3 yeah , choose and configure your preferred idp after configuring it, if you're not using virtucrypt , retain the following information required for integrating the idp with both {{ch}} and google workspace openid connect discovery url openid connect client id openid connect pki choose your idp for cse if you don't already use a third party idp with google workspace, you can set up your idp for use with your key service in any of the following ways use virtucrypt idp this is detailed in the main document choose this if you want to use {{futurex}} virtucrypt as your idp if you’re following this path, continue to the next paragraph use google identity if your security model doesn't require additional isolation of your encrypted data from google, you can use the default google identity as your idp complete google idp integration docid\ wmdd41a3r5b8z4t42rzck before starting the main integration use okta idp okta is a popular identity provider that integrates well with google workspace cse complete okta integration docid\ fcejpiugm3788ijevvcxg before reading the main integration guide use another third party idp use another third party idp that supports the openid connect (oidc) standard ( openid net/connect/ ) you can apply the general principles in the google and okta setups to most third party idps choose how to connect to your idp for cse you can set up your idp by using either a well known file that you host on your organization website or the admin console (which is your idp fallback) the following table covers considerations for each method considerations well known setup admin console setup (idp fallback) isolation from google idp settings are stored on your server idp settings are stored on google servers admin responsibilities an idp admin can manage your setup instead of a google workspace super admin only a google workspace super admin can manage your idp setup cse availability cse availability (uptime) depends on the availability of the server that hosts your well known file cse availability corresponds to the general availability of google workspace services ease of setup requires changing dns settings for your server, outside of the admin console configure settings in the admin console sharing outside your organization your collaborator's external key service can easily access your idp settings this access can be automated and ensures your collaborator's service has immediate access to any changes to your idp settings your collaborator's external key service can't access your idp settings in the admin console you must provide your idp settings directly to your collaborator before you share encrypted files for the first time, as well as any time you change your idp settings refer to the following google workspace knowledgebase article for further details on connecting google workspace to an identity provider (idp) https //support google com/a/answer/10743588?hl=en#zippy=%2coption to connect to your idp using a wellknown file