Using ADFS 2.0 for Google apps single sign on

Microsoft Active Directory Federation Services 2.0 has been recently released, and it has passed interoperability tests for SAML 2.0.

Does this mean that is can be used to authenticate users of Google Apps which also uses SAML?

Has anyone successfully setup Google apps with ADFS 2.0 for single sign on?

If you have gotten it to work please tell us what is required to get this working?

To put it another way, does someone have a good HOWTO for using ADFS 2.0 and Google Apps together? I was not able to find anything through a search of the web.

From serverfault Zoredache

• I think the problem here is that there are no simple How-to steps to configuring SSO. If you look at this diagram it shows the authentication process. You would need an custom web application on your side to to interact with ADFS. When you configure it from the Google Apps CPanel you give it a Sign-in, Sign-out, & password change urls and a public key certificate is also required.

  http://code.google.com/googleapps/domain/sso/saml_reference_implementation.html

  There are many 3rd Party tools that could assist in the Google Apps Marketplace. http://www.google.com/enterprise/marketplace/search?orderBy=rating&query=saml

  From citadelgrad

• check it dont wreck it http://www.google.com/support/forum/p/Google%20Apps/thread?tid=4752fe07313712ff&hl=en

  dude at the end says he has got it working.

  i am going to be playing with his solution in the next couple of days.

  s.

  Zoredache : That looks very promising. I'll have to try that.
  From google_helps