The Skolon platform, in combination with Skolon Pass (a QR code-based login solution), can be configured to act as an external identity provider (IdP) for both Google Workspace and Chrome OS devices. This setup enables students and staff—particularly younger students or users with accessibility needs—to sign in without usernames or passwords, simply by scanning a QR code. This streamlines access to Google services like Classroom, Drive, Gmail, and Docs, and makes logging in fast, secure, and user-friendly.

To enable this functionality, Skolon is set up as a SAML 2.0 identity provider within the Google Workspace environment. The configuration requires administrative access to the Google Admin Console and involves setting up a custom SAML application, enabling third-party SSO, and assigning login policies to the appropriate users or organizational units (OUs).

To assign the use of an external IdP for users in Google Workspace, administrators configure the login settings in the Google Admin Console and apply them to specific OUs. The users who should use Skolon Pass (QR code) as their SSO method are then placed in these OUs, ensuring that only the intended users are prompted to log in via QR code.

Prerequisites

To install Skolon as an IDP to Google Workspace and Chrome OS-devices, you will need the following in Skolon:

• Users in the Skolon Platform

• Email addresses in Skolon has to be identical to the email addresses in Google Workspace

• A valid agreement with Skolon that covers the use of the Skolon Pass

Google Workspace domain

An external IDP has to be assigned to users and devices in your Google Workspace domain. This can be done through either groups or OU’s. In order to do this assignment your Google Workspace domain has to have groups or OU’s for the intended users and/or Chrome OS devices.

Installation

For further installation instructions, read the article Install Skolon Pass (QR-code) as an IDP to Google Workspace