Integrate Prisma Access Browser with Google Workspace
Focus
Focus
Prisma Access Browser

Integrate Prisma Access Browser with Google Workspace

Table of Contents

Integrate
Prisma Access Browser
with Google Workspace

Learn how to integrate the
Prisma Access Browser
with Google Workspace.
Where Can I Use This?
What Do I Need?
  • Strata Cloud Manager
  • Standalone
    Prisma Access Browser
  • Prisma Access
    with
    Prisma Access Browser
    bundle license or
    Prisma Access Browser
    standalone license
  • Google Workspace
You can use Google Workspace with custom or third-party applications to enrich existing Google Workspace services or to use new features with Google Workspace. After you integrate
Prisma Access Browser
with Google Workspace, your users will be able to open only the applications that you’ve assigned to the
Prisma Access Browser
.
Before you begin, ensure that you complete the following tasks:
  • Deploy the Context-Aware Access feature in Google Workspace, which is available for Enterprise and Education accounts or with Cloud Identity Premium.
  • Set up SSO authentication to
    Prisma Access Browser
    with Google.
  1. Enable the Google Workspace integration in
    Strata Cloud Manager
    and obtain the
    Prisma Access Browser
    certificate:
    1. Go to
      Manage
      Configuration
      Prisma Access Browser
      Administration
      Integrations
      Services
      .
    2. Scroll to
      Google Workspace Integration
      and expand it.
    3. Click
      Enabled
      .
    4. In part 1, select
      Prisma Access Browser Certificate
      . The certificate will download.
  2. Add the certificate for
    Prisma Access Browser
    in the Google Admin console.
    1. Click
      Certificates
      , then
      ADD CERTIFICATE
      , and upload the
      Prisma Access Browser
      certificate that you downloaded.
    2. Select
      Endpoint Verification
      and click
      ADD
      .
  3. Create a new access level in the Google Admin console.
    1. If Context-Aware Access is disabled, enable it.
    2. Click Access levels, then
      CREATE NEW ACCESS LEVEL
      .
    3. Name the new access level
      Prisma Access Browser
      or any other name of your choice.
    4. Select
      ADVANCED
      and paste the following text:
      evice.certificate1s.exists(cert, cert.is_valid && cert.root_ca_fingerprint == "kiLbsQhDpeCsDkM6ox2oHiaxOiQQ45u8FV1AmeQxc9E")
  4. Assign the new access level to your apps.
    1. Click
      Assign access levels
      .
    2. Select one or more apps in the list and click
      Assign
      .
    3. Select the newly
      Prisma Access Browser
      access level that you created in Step 3.
  5. Validate the integration on an endpoint.
    1. Install the
      Prisma Access Browser
      on an endpoint.
    2. Wait for the new Google Workspace configuration to complete, usually 5 minutes.
    3. From the
      Prisma Access Browser
      , sign in to an assigned app and test the following:
      • Make sure that you can successfully sign in to an application that uses the Google Workspace SSO.
      • Make sure that you can't sign in to the application from a different browser.
      After you complete the validation, and your users will be able to open only the applications that you’ve assigned to the new access level using the
      Prisma Access Browser
      .

Recommended For You