This functionality is not currently available in CloudManger for Microsoft
Single Sign On (SSO) for CloudManager allows you to provide a custom login screen for your G Suite applications and CloudManager, along with providing Single Sign On for any SAML enabled service that you use.
CloudManager SSO logs your users in using their G Suite username and password, so your users can start using it with known credentials straight away.
Before enabling Single Sign On (SSO) within CloudManager you will need to download the X.509 Certificate by selecting Download X.509 Certificate from the Global Settings>>Global Login Controls menu.
The certificate must then be uploaded to Google G Suite via the Single Sign On (SSO) setup page available at https://admin.google.com/yourdomain.com/SetupSSO.
This certificate will also be needed by any other service provider you choose to configure to work with SSO.
To enable CloudManager Single Sign On (SSO) you must select Enable within the Single Sign On (SSO) section.
By selecting Enable, CloudManager will automatically configure your Google G Suite environment, populating the Google Single Sign On (SSO) settings.
It is important that you select yes when prompted to allow CloudManager to configure these settings, or SSO will not work correctly.
If you disable SSO at any time, it is also recommended to allow CloudManager to remove the settings in your Google environment.
For further information on how Google Apps Single Sign On (SSO) works, please refer to the SAML Single Sign-On (SSO) Service for G Suite reference.
To configure other platforms for SSO use the information on the SSO configuration page appropriately for your platform.
In order for Single Sign On (SSO) to function Google two factor authentication must be disabled for all users.