Security Key Security Key—is—an—enhancement—for—2-step—veriication.—Google,—working— with the FIDO Alliance standards organization, developed the Security Key — an actual physical key used to access your Google Account. It sends an encrypted signature rather than a code, and helps ensure that your login cannot be phished. Google Cloud admins will be able to easily deploy, monitor and manage the Security Key at scale with new controls in the Admin console with no additional software to install. IT admins will see where and when employees last used their keys with usage tracking and reports. If Security Keys are lost, admins can easily revoke access to those keys and provide backup codes so employees can still sign-in and get work done. Single sign-on (SAML 2.0) G—Suite—ofers—customers—a—single sign-on (SSO) service that lets users access multiple services using the same sign-in page and authentication credentials. It is based on SAML 2.0, an XML standard that allows secure web domains to exchange user authentication and authorization data. For additional security, SSO accepts public keys and certiicates—generated—with—either—the—RSA—or—DSA—algorithm.—Customer— organizations can use the SSO service to integrate single sign-on for G Suite into their LDAP or other SSO system. OAuth 2.0 and OpenID Connect G Suite supports OAuth 2.0 and OpenID Connect, an open protocol for authentication and authorization. This allows customers to G—Suite—also—ofers— conigure—one—single—sign-on—service—”SSO)—for—multiple—cloud—solutions.— Users can log on to third-party applications through G Suite—and administrators full control vice versa—without re-entering their credentials or sharing sensitive password information. to—conigure—infrastructure,— applications and system Data management features integrations in a single dashboard via our Admin Information Rights Management (IRM) console — regardless of the With Information Rights Management (“IRM”) you can disable size of the organization. downloading, printing and copying from the advanced sharing menu ȃ—perfect—for—when—the—ile—you’re—sharing—is—only—meant—for—a—few— select—people.—This—new—option—is—available—for—any—ile—stored—in—Google— Drive, including documents, spreadsheets and presentations created in Google Docs. 17
Google Cloud Security and Compliance Whitepaper Page 20 Page 22