Set up auto provisioning for custom SAML Web app in Google workspace - saml

I am trying to set up a custom SAML Web app with auto provisioning in my google admin. I am able to create an custom SAML Web app but the auto provisioning feature is not available. As per this community link there are a bunch of other apps which provide auto provisioning. I couldn’t find a way to setup a custom one.
I am creating a custom SAML Web app by following steps:
Logging into google admin
App -> Web and Mobile Apps -> Add App -> Add custom SAML App
Below is how it looks after i create few apps already present in the apps list and when i create a custom SAML App. The custom app clearly does not have the User auto provisioning or there is a setting for the same which i am missing.
How do i set up auto provisioning for custom SAML Web app?
Please help!

Currently there is no support for auto-provisioning on custom SAML apps. In their release blog post Google explains how this works:
Following this launch, admins will be able to set up automated user provisioning and deprovisioning for Salesforce.com and other apps (with support for more applications coming soon).
These are apps that they are specifically adding support to. Since then they have been steadily adding more apps to their catalog, but it's still a predefined list. All SPs have different APIs to provision users so it is probably not so easy to create an interface that will be able to connect with any of them, so Google seems to be sticking to implementing them one by one.
The link that you shared contains another link to Apps that support automated provisioning, which has the full list of supported apps. Any app outside of this list won't have auto-provisioning available.

Related

How to Verify User is using TWA as opposed to PWA

I'm looking to launch a single web app that works as a PWA for web users and a TWA for users wanting to download it from the Google Play Store. The app includes a yearly subscription so I'll need to implement separate payments methods for the PWA and TWA in order to comply with Google Play policies.
With this being said, is there a way to identify with JS if the user is viewing the PWA vs the TWA app from the play store? Perhaps something unique to check in the global window object?
Or, is it recommended to publish a whole new version of the app used for the TWA to a different URL that only supports the Google Play payment option.
Any info would be great. Thanks in advance.

Sharing image/link LinkedIn without app installation

Is this necessary to install LinkedIn app while sharing an image and URL in swift?
It is not possible. In iOS, each app is in a separate sandbox and they cannot access information from each other. The only communication iOS allows you to make between apps is called a shared extension, and that requires your target app to be installed.

How to implement SSO between App Center Client and MobileFirst common apps?

We want to deploy App Center Client (maybe to customize one based on App Center API) as other apps developed based on MobileFirst platform. The current environment has LDAP (TDS) and ISAM (TAM), how to implement the SSO between them?
I know we can easily to do SSO between common mobile apps based on MobileFirst Platform, but if we want add the appcenter client to SSO, how to do it?
Device SSO between MFP-based applications is indeed possible.
A requirement for Device SSO to work isa connection to the MFP Server
The Application Center installer app is a MFP-based application as well, however this application does not contact the MFP Server. It contacts the Application Center Management Server.
So in theory, you could enable device SSO by following the user documentation (linked above), however it will be "one-sided" in the sense that it will work in the Application Center installer app only if the login was first done by the "regular" MFP-baed app.

Google Maps iOS SDK Integration not loading maps

I am using Google maps iOS SDK in my iPhone application. I am showing a place mark on the map and it is working fine in my iPhone device using my apple developer account certificates. But when i sent build to testing team using a different Enterprise Apple developer account certificates(Enterprise account), the maps are not loading up, it only shows the Place mark on a blank screen with the maps loading up.
I have also tried on my iPhone devices with the enterprise apple developer account, and it is not loading the map(Just a Pin on blank screen). But with my own apple developer account certificates, it is working absolutely fine.
I am assuming that the problem is in Enterprise Apple developer account(Might be i have change some settings on Apple developer account for my App Id). I am not able to find out a solution for this.
Can anybody help me out on this? If you need more information on this , please ask me in a comment.
Thanks in Advance!
Typically this will happen if you don't have the app bundle id added to your google APIs console. The bundle id (eg., com.myname.appname) is what google uses to verify that an app is allowed to use a certain api key. If you've moved your app from one developer account to another, you've probably changed the bundle id in the process. Fortunately, google allows you to associate multiple bundle ids with a single api key.
To add a new bundle id:
Verify the bundle id you are using in xcode (select the target and look under summary)
Login to https://code.google.com/apis/console/
Select "API Access" on the left column
Select "Edit allowed iOS apps" under the "key for iOS apps" section
Add the bundle id used in the enterprise build
Also possible
For me, I just simply haven't enabled the SDK for iOS.
To make sure you have:
Go to your console with your selected project.
Navigate to the API Library page
Click on Maps SDK for iOS
Press the enable button (it's not there any longer after it's enabled.. so make sure that it says API Enabled.
Note:
I know this answer doesn't contribute to the specific question... but it fits the title!

How to list certificates from the iPhone keychain inside my app?

I am creating an iPhone app where we want to use x.509 certificates for client authentication. The user can install their cert from an email... It shows up under Settings -> General -> Profiles...
However I am unable to read these certificate from my app...
I want to provide an interface similar to provided by Junos Pulse VPN client... A configuration window listing all the certificates in the device keychain and let the user select their identity.
How do I go about achieving this???
The Junos Pulse app is apparently getting its access via a VPN plugin which is a private API supplied by Apple on an invitation-only basis. That API is giving the app access to those certificates otherwise accessible only to built-in iOS apps like Safari.
Review the following which were very helpful when I was researching the topic:
iOS get Configuration Profiles that are installed
(Apple Development post linked in one of the answers)
https://devforums.apple.com/message/660579#660579
You cannot access that keychain. And, yes, use search.
From Apple Docs:
The iOS gives an application access to only its own keychain items.
Read more here: Keychain Services Programming Guide