SAML SSO for Chrome Browser...

203 views

Skip to first unread message

Sean

unread,

Dec 4, 2015, 1:48:36 PM12/4/15

to Chromium-discuss

Hi All,

I have google apps and have SSO setup with a third party IdP. Everything works great if I'm using the web applications i.e. gmail, drive, etc. I successfully get redirected to the IdP, sign-in, and then get access to the app. However, when I sign in to the chrome browser, I'm first prompted with the sign-in screen from CHROME. It will redirect to my IdP, but only after prompting for a username/password. Is there a way for me to by-pass this and go straight to my IdP?

I took a fiddler trace when going to "chrome://chrome-signin" and can see the traffic it generates. Specifically it looks like it goes here:

https://accounts.google.com/ServiceLogin?skipvpage=true&sarp=1&rm=hide&continue=chrome-extension%3A%2F%2Fmfffpogegjflfpflabcdkioaeobkgjik%2Fsuccess.html%3Fsource%3D12&service=chromiumsync&hl=en-US

Looking at the parameters it's obvious it returns to the chrome-extension "mfffpogegjflfpflabcdkioaeobkgjik". Unfortunately if I enter this URL myself instead of going to "chome://chrome-signin" then it throws an error after being returned from the IdP saying "This webpage is not available" "chrome-extension://mfffpogegjflfpflabcdkioaeobkgjik/success.html?source=12". This is important to me because it looks like I could do something very similar to https://www.google.com/a/<domainname>/ServiceLogin?... If I got that to work it would resolve my issue completely! But this error is starting to drive me crazy. Is there a way to instantiate "chrome://chrome-signin" with parameters that point directly to my IdP?