Identity Providers
This section describes how to create and delete identity providers. An identify provider authenticates the identities of users logging on to Google Drive to use Google Workspace CSE. It is verified using either an issuer or a JSON Web Key Set (JWKS). Identity providers are required when creating endpoints. Refer to Creating Endpoints for details.
Creating Identity Providers
An issuer or an openId configuration URL is required to create an identity provider.
To create an identify provider:
Open the Cloud Key Manager Application.
In the left pane, click Services > Google Workspace CSE. The Google Workspace Client Side Encryption page is displayed.
Under IDENTITY PROVIDERS, click Create Identity Provider. The Create Identity Provider screen is displayed.
Specify a unique Name for the provider. This is a mandatory field.
Select the Provider Verifier. This is a mandatory field.
The verifier can be:
Issuer: Select and specify the valid Issuer and jwksURL. The jwksURL field is optional, and is populated automatically based on the specified issuer.
OpenId Configuration URL: Select and specify the OpenId Configuration URL. The URL must be valid. For example, when using SafeNet Trusted Access (STA) as an identity provider, the URL is represented by WELL KNOWN CONFIGURATION URL on the STA Management Console.
Click Next. The Confirm and Create screen is displayed.
Verify the provider details. If the details are incorrect or you want to modify them, click Back and update the details.
Click Save.
The newly created identity provider appears in the providers list. Similarly, add as many identity providers as required.
Viewing Identity Providers
The Google Workspace Client Side Encryption page shows the available identity providers. The IDENTITY PROVIDERS section shows the Name, Issuer, OpenID Configuration URL, and jwksURL.
To view identity providers:
Open the Cloud Key Manager Application.
In the left pane, click Services > Google Workspace CSE.
Navigate to IDENTITY PROVIDERS. The list of identity providers is displayed.
The following details are shown:
Column Description Name Name of the identity provider. Issuer Issuer string from the identity provider JWT. OpenID Configuration URL URL of the OpenID configuration. jwksURL URL of JWKS.
Deleting Identity Providers
When an identity provider is no longer needed, delete it from the CipherTrust Manager. Before deleting the provider, ensure that it is not in use by any endpoints.
To delete an identify provider:
Open the Cloud Key Manager Application.
In the left pane, click Services > Google Workspace CSE.
Under IDENTITY PROVIDERS, click the overflow icon
corresponding to the provider you want to delete.Click Delete.
A warning message appears stating that the provider will be deleted permanently. Do you want to delete this identity provider?
Select I wish to delete this provider.
Click Delete.
The identity provider is removed from the providers list.
