>
    Integrate Prisma Access Browser with Google Workspace
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access Browser
    3. Integrate Prisma Access Browser with Google Workspace
    Download PDF
    Prisma Access Browser

    Integrate Prisma Access Browser with Google Workspace

    Table of Contents

    Integrate Prisma Access Browser with Google Workspace

    Learn how to integrate the Prisma Access Browser with Google Workspace.
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • Standalone Prisma Access Browser
    • Prisma Access with Prisma Access Browser bundle license or Prisma Access Browser standalone license
    • Role: Prisma Access Browser Roles
    • Google Workspace
    You can use Google Workspace with custom or third-party applications to enrich existing Google Workspace services or to use new features with Google Workspace. After you integrate Prisma Access Browser with Google Workspace, your users will be able to open only the applications that you’ve assigned to the Prisma Access Browser.
    Before you begin, ensure that you complete the following tasks:
    • Deploy the Context-Aware Access feature in Google Workspace, which is available for Enterprise and Education accounts or with Cloud Identity Premium.
    • Set up SSO authentication to Prisma Access Browser with Google.
    1. Enable the Google Workspace integration in Strata Cloud Manager and obtain the Prisma Access Browser certificate:
      1. Go to ManageConfigurationPrisma Access BrowserAdministrationIntegrationsServices.
      2. Scroll to Google Workspace Integration and expand it.
      3. Click Enabled.
      4. In part 1, select Prisma Access Browser Certificate. The certificate will download.
    2. Add the certificate for Prisma Access Browser in the Google Admin console.
      1. Go to Google Admin consoleDevicesNetworks.
      2. Click Certificates, then ADD CERTIFICATE, and upload the Prisma Access Browser certificate that you downloaded.
      3. Select Endpoint Verification and click ADD.
    3. Create a new access level in the Google Admin console.
      1. Go to Google Admin ConsoleSecurityAccess and data controlContext-Aware Access.
      2. If Context-Aware Access is disabled, enable it.
      3. Click Access levels, then CREATE NEW ACCESS LEVEL.
      4. Name the new access level Prisma Access Browser or any other name of your choice.
      5. Select ADVANCED and paste the following text:
        evice.certificate1s.exists(cert, cert.is_valid && cert.root_ca_fingerprint == "kiLbsQhDpeCsDkM6ox2oHiaxOiQQ45u8FV1AmeQxc9E")
    4. Assign the new access level to your apps.
      1. Go to Google Admin ConsoleSecurityAccess and data controlContext-Aware Access.
      2. Click Assign access levels.
      3. Select one or more apps in the list and click Assign.
      4. Select the newly Prisma Access Browser access level that you created in Step 3.
    5. Validate the integration on an endpoint.
      1. Install the Prisma Access Browser on an endpoint.
      2. Wait for the new Google Workspace configuration to complete, usually 5 minutes.
      3. From the Prisma Access Browser, sign in to an assigned app and test the following:
        • Make sure that you can successfully sign in to an application that uses the Google Workspace SSO.
        • Make sure that you can't sign in to the application from a different browser.
        After you complete the validation, and your users will be able to open only the applications that you’ve assigned to the new access level using the Prisma Access Browser.

    © 2024 Palo Alto Networks, Inc. All rights reserved.