Swif makes it easy to set up Google Single Sign-On (SSO) on your Windows devices. Follow the steps below to deploy this policy and enable secure Google login for your organization’s permitted domains.
You can find these details in Google's support article - Install Google Credential Provider for Windows.
Step 1: Set Up Google SSO Policy in Swif
In your Swif dashboard, create a new policy for Google SSO on Windows or select an existing one.
Enable Google SSO within the policy settings.
This policy will ensure that users can log in to their Windows devices with Google accounts once the enrollment token is configured.
Step 2: Obtain and Set the Enrollment Token
To connect your Google SSO setup with Swif, you’ll need an enrollment token from your Google Admin Console. Follow these steps:
Log in to your Google Admin Console.
Under Google Credential Provider for Windows (GCPW) setup, locate and copy the Enrollment Token.
Go back to Swif, and paste the Enrollment Token into the Google SSO policy.
This token connects your Google SSO policy with the Google Admin Console, allowing users to authenticate on Windows with their Google credentials.
Step 3: Set Permitted Domains for GCPW
Specify which domains are permitted to use Google SSO for Windows login. This ensures that only authorized users from your organization can log in.
In the Google Admin Console, go to Menu > Devices > Mobile and endpoints > Settings > Windows.
Under Google Credential Provider for Windows (GCPW) setup, click on Permitted domains.
Enter the domains that you want to allow for GCPW sign-in (e.g.,
yourcompany.com).Note: If no domains are added, users will not be able to sign in through GCPW.
Click Save. It may take up to an hour for these settings to sync with your devices.
Additional Configurations (Optional)
Once the basic settings are complete, you can explore further configurations in the Google Admin Console to enhance your Google SSO setup on Windows devices. This could include setting up additional security policies or user restrictions as per your organization’s requirements.
This setup will allow users to securely log in to their Windows devices using Google accounts, managed through Swif’s seamless integration with the Google Admin Console. If you need further assistance, feel free to reach out to our support team.
Please note Google SSO will automatically create 2 local user accounts. One is to manage google SSO policies and updates and the other one will be mapped to your Google login user, eg.
User "fullName": "Google Credential Provider for Windows helper", "userName": "gaia", and "privileges": "Standard" is used to managing SSO resources.
Another user based on your Google user will have "privileges": "Standard".