Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Microsoft Active Directory Federation Services 2.0 has been recently released, and it has passed interoperability tests for SAML 2.0.

Does this mean that is can be used to authenticate users of Google Apps which also uses SAML?

Has anyone successfully setup Google apps with ADFS 2.0 for single sign on?

If you have gotten it to work please tell us what is required to get this working?

To put it another way, does someone have a good HOWTO for using ADFS 2.0 and Google Apps together? I was not able to find anything through a search of the web.

share|improve this question

I have got this working - Google Apps Single Sign-on, ADFS and a custom STS (although you could easily use Windows Auth or some other STS downstream, it doesn't affect the Google/ADFS configuration).

I have documented the steps required on my blog:

share|improve this answer

I think the problem here is that there are no simple How-to steps to configuring SSO. If you look at this diagram it shows the authentication process. You would need an custom web application on your side to to interact with ADFS. When you configure it from the Google Apps CPanel you give it a Sign-in, Sign-out, & password change urls and a public key certificate is also required.

There are many 3rd Party tools that could assist in the Google Apps Marketplace.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.