Christian Pedersen
posted this on March 11, 2010 04:48 pm
Note that Google Apps disables SAML if you have checked Enable pre-release features under Domain Settings -> General.
To log users into Google Apps for Domains without having to provision them with passwords etc, you can use the SAML enabled Google Apps connector from OneLogin.
NOTE: Google Apps usernames are the email alias of users. Do not provide SAML access to your Google Apps account for other users than those on your domain. If you invite a user from another domain into your OneLogin account, you might accidently give that user access to Google Apps.
Follow these step to configure Google Apps and OneLogin for SAML:

Once you enable SAML in Google Apps, users can no longer change the password their POP3/IMAP mail client uses to retrieve mail. Make sure you enter your administrator email and password when setting up the app, as this is required for users to set their mail client password via the dashboard. This is done by editing the Google Apps login and then selecting Change Password.
Please note:
You can use regular bookmarks to jump directly to Mail, Docs, Calendar and Sites. See this tip for how.