On September 21, 2022, Google started shutting down the password vaulted apps feature in the Admin Console. Shutdown will be complete by June 21, 2023. The following timeline gives details on what features will be available during each phase of the shutdown:
Timeline
Until September 20, 2022 | |
Admins can...
|
Users can...
|
Starting September 21, 2022 | |
Admins can...
Admins can no longer...
|
Users can... (No change) |
After June 21, 2023 | |
Admins can no longer...
|
Users can no longer...
|
What do I need to do?
As soon as possible, review your current password vaulted apps, and locate alternative apps that best meet your users’ needs:
- Check if the app or an alternate is included in the pre-integrated SAML apps catalog. If it is, set up SSO via SAML.
- If the app isn't in the catalog, but supports SAML, you can set it up as a custom SAML application.
- If the app doesn’t support SAML, use an alternate password vault solution.
Before the final shutdown of password vaulted apps on June 21, 2023, we recommend following these steps:
- Inform users of the coming shutdown.
- Remove all password vaulted app assignments and credentials.
- Delete each app, by clicking DELETE in each row in the app list.
- Export Admin and user access logs of Password vaulted apps events by June 20, 2023.
Note: After deleting a password vaulted app in the Admin console, your users won’t be able to access it from their Google account’s Dashboard. However, since the password vaulted apps service stores only the external passwords, deleting the app will not affect the external systems.
Important: If you don’t take any action by June 20, 2023, you and your users will lose access to all features related to your password vaulted apps, since all application data will be purged after June 20, 2023.
FAQ
How do I check if the app or an alternative has pre-integrated SSO with Google?Your password vaulted app may be included in the Google pre-integrated SAML apps catalog. Check the catalog for your app (or an alternative app), then click the link in the More information column for setup instructions.
- Once installed, your users can sign into these apps using their Google credentials.
- Many apps in the catalog also support automated user provisioning .
Please check with the app developer to verify that the app supports SAML 2.0 authentication. If it does, you can configure the app as a custom SAML application.
If the app doesn’t support SAML, you might have to subscribe to a third party password vault solution and manually set up Password vaulted apps. After a one-time setup operation, users will need to start storing their credentials in the password vault solution.
We're here to help
If you have questions or need assistance, please contact Cloud Identity Premium support.