Password vaulted apps will shut down on June 21, 2023

On September 21, 2022, Google started shutting down the password vaulted apps feature in the Admin Console. Shutdown will be complete by June 21, 2023. The following timeline gives details on what features will be available during each phase of the shutdown: 


Until September 20, 2022

Admins can...

  • Add new password vaulted apps
  • Configure login credentials, grant access to users and groups.
  • View and download password vault log events.
  • Assign password vault related privileges to other admins.

Users can...

  • Single sign-on (SSO) to configured password vaulted apps from their Dashboard.
Starting September 21, 2022 

Admins can...

  • Manage password vaulted apps added before September 21, 2022
  • Grant access to new users and groups.
  • View and download password vault log events.
  • Assign password vault related privileges to other admins.

Admins can no longer...

  • Add new password vaulted apps.

Users can...

(No change)

After June 21, 2023

Admins can no longer... 

  • Manage password vaulted apps. The password vaulted apps menu item will no longer appear in the Admin console.
  • View and download password vault log events
  • Assign password vault related privileges to other admins.

Users can no longer...

  • See password vaulted apps in their dashboard. 
  • Use Chrome or Firefox extensions or plugins.

What do I need to do?

As soon as possible, review your current password vaulted apps, and locate alternative apps that best meet your users’ needs:

  1. Check if the app or an alternate is included in the pre-integrated SAML apps catalog. If it is, set up SSO via SAML.
  2. If the app isn't in the catalog, but supports SAML, you can set it up as a custom SAML application.
  3. If the app doesn’t support SAML, use an alternate password vault solution.

Before the final shutdown of password vaulted apps on June 21, 2023, we recommend following these steps:

  1. Inform users of the coming shutdown.
  2. Remove all password vaulted app assignments and credentials.
  3. Delete each app, by clicking DELETE in each row in the app list.   
  4. Export Admin and user access logs of Password vaulted apps events by June 20, 2023.  

Note: After deleting a password vaulted app in the Admin console, your users won’t be able to access it from their Google account’s Dashboard. However, since the password vaulted apps service stores only the external passwords, deleting the app will not affect the external systems.

Important: If you don’t take any action by June 20, 2023, you and your users will lose access to all features related to your password vaulted apps, since all application data will be purged after June 20, 2023.


How do I check if the app or an alternative has pre-integrated SSO with Google?

Your password vaulted app may be included in the Google pre-integrated SAML apps catalog. Check the catalog for your app (or an alternative app), then click the link in the More information column for setup instructions.

  • Once installed, your users can sign into these apps using their Google credentials.
  • Many apps in the catalog also support automated user provisioning . 
My app isn't in the pre-integrated SAML catalog, but it supports SAML. How do I set up SSO with Google?

Please check with the app developer to verify that the app supports SAML 2.0 authentication. If it does, you can configure the app as a custom SAML application.

My app doesn't support SAML. What should I do?

If the app doesn’t support SAML, you might have to subscribe to a third party password vault solution and manually set up Password vaulted apps. After a one-time setup operation, users will need to start storing their credentials in the password vault solution.  

We're here to help

If you have questions or need assistance, please contact Cloud Identity Premium support.

Was this helpful?

How can we improve it?
Clear search
Close search
Google apps
Main menu