Gmail Enterprise App | SSO

Question

Hello everyone,

I'm migrating some users to Gmail Workspace and I'm facing errors that I couldn't find what is happening exacly yet.

I have GCDS to sync our AD users/groups to Google and also the Gmail enterprise application on Azure to use SSO, all good so far.

The sync and SSO is working properly for users that don't have any accentuation on their names. But users that have accentuation can not login on Google.
Have anyone seen something like that? Any idea what could be?

Thanks in advance.
Leandro Lima

Answer 1

Hi @Leandro Lima ,

There is a known limitation. Google Workspace does not support non-ASCII characters, and Azure does not support replacing/transforming the data inside claims from non-ASCII to ASCII as it is a standard requirement to include non-ASCII characters.

I've reported this issue to both the Google and Azure teams, and they are aware of it. There is no ETA for a fix yet, though. The issue is because Google does not accept non-ascii characters in fields such as display name last name.

The best recommendation is to omit these types of attributes and rely on UPN/e-mail address. Our issued tokens will contain the users' names as stored in AAD - so if they have non-ASCII characters, we will include those.

See related issues:
https://github.com/MicrosoftDocs/azure-docs/issues/84432
https://learn.microsoft.com/en-us/answers/questions/50242/g-suite-sso.html

I also recommend creating a request with Google to drive this improvement. https://support.google.com/a/answer/6284762?hl=en

-

If the information helped you, please Accept the answer. This will help us and other community members as well.