SAML SSO for external apps

30 views
Skip to first unread message

Paul Haenze

unread,
Jan 15, 2026, 7:21:12 PM (6 days ago) Jan 15
to GAM for Google Workspace
I am administering a Workspace for Non-profits account. We have set up external systems to use Google Workspace accounts for Single Sign On. Two of these are Acumatica and BambooHR. I would like to run a report showing when Workspace provides authentication for these external programs. When I run the report command "gam report saml user <username>" I receive nothing. I have two questions:
1. What is the specific command I should be using? Running "gam report oauthtoken user <username>" does not show these external authentications.
2. I have had a difficult time tracking down whether Workspace for Non-profits does, in fact, allow this report. Does anyone have a definitive answer?
Thanks.
Paul

Guillaume Galiano

unread,
Jan 16, 2026, 5:39:54 AM (5 days ago) Jan 16
to GAM for Google Workspace
Hi Paul,
we do it through the Sentinel One SIEM with Google workspace connector, but i think a stack like ELK or anything else can do the jobs,
     https://www.facebook.com/alineameublesetdecohttps://twitter.com/alinea_frhttps://fr.pinterest.com/alinea/https://www.instagram.com/Alinea/https://www.youtube.com/user/alineafrance

Paul Haenze

unread,
Jan 16, 2026, 1:40:10 PM (5 days ago) Jan 16
to GAM for Google Workspace
This question concerned how to do something in GAM, not how to do it in an external, paid product. Please don't SPAM.

Ross Scroggs

unread,
Jan 16, 2026, 1:55:05 PM (5 days ago) Jan 16
to google-ap...@googlegroups.com
What does this show: gam report login user <username>

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/543332eb-d47b-4f9a-ae3a-138f62bcf7a4n%40googlegroups.com.


--

Paul Haenze

unread,
Jan 16, 2026, 2:02:02 PM (5 days ago) Jan 16
to GAM for Google Workspace
I used the todrive option and it created a list with the following headers:

name

login_challenge_method

login_type

resourceIds

resourceIds.0

type

actor.email

actor.profileId

id.applicationName

id.customerId

id.time

id.uniqueQualifier

ipAddress

networkInfo.ipAsn

networkInfo.ipAsn.0

networkInfo.regionCode

networkInfo.subdivisionCode

resourceDetails

resourceDetails.0.id

resourceDetails.0.type

is_suspicious

is_second_factor
login_challenge_status

Can you tell me which column would show external logins using SSO from Workspace?

Thanks so much for your help.

Paul





Reply all
Reply to author
Forward
0 new messages