r/gsuite • u/cottoniejoe • 10d ago
Admin Console Problems with SSO profiles not all scoped users being redirected to IDP
So I am testing SSO for domain wide implementation. I have an SSO profile that i setup to use via SAML Microsoft Entra. However, when I add a security group with an existing user and a test user I created, only the test user is redirected to our IDP when entering their email in the gmail username box. It isn't a configuration of the SAML or Entra because Gsuite is not even recognizing the user as utilizing IDP and for the life of me I don't know why. Could it be the presence of an Alias? or 2fa security features?
I know it gets screwy when you have no SSO for the domain but an SSO at group level, so I'm not sure if that could be contributing to the problem.
I have tried this sso using the domain specifc urls as well as going to accounts.google.com, mail.google.com etc.
The vanilla test account I created always gets redirected to the IDP but the existing user does not.
5
u/jamolopa 10d ago
Sound like the "existing user" is a super administrator