2sv with SSO?

gsu · 11-30-2023 10:18 AM

Hi all,

Has anyone successfully implemented 2SV for their Google Workspace where there is also Single Sign On in place? We are not using Google as our SAML identity provider. We have SimpleSAML that talks to AD for authentication. We set 2sv enforcement to be turned on after a certain date, but when that day comes, no enforcement. We allowed the option for users to enroll themselves, and we set up several test accounts. Logged in and turned on 2sv under login security settings, got the verification code on the phone, but subsequent logons did not prompt for the second factor, even on a different browser or a different computer.

Has anyone ran into a similar issues like this when rolling out 2sv?

Thanks,

Guann

icrew

If you're using SSO, you need to enforce 2-factor using your SSO provider, not Google. (Which also makes logical sense, as that then protects all of your assets behind SSO, not just your Google accounts.)

Cheers,

Ian

gsu

We have our suspicions that might be the case.