G-Suite (Google Workspace) authentication into Office 365 (SAML)

https://www.youtube.com/watch?v=C46djGWiaDA

https://pastebin.com/buTh1mcm

1. Install-Module MSOnline
2. Import-Module MSOnline
3. Connect-MsolService
4. $domainName = "<your domain>"
5. [xml]$idp = Get-Content <metadata-xml-file-path>
6. $activeLogonUri = "https://login.microsoftonline.com/login.srf"
7. $signingCertificate = ($idp.EntityDescriptor.IDPSSODescriptor.KeyDescriptor.KeyInfo.X509Data.X509Certificate | Out-String).Trim()
8. $issuerUri = $idp.EntityDescriptor.entityID
9. $logOffUri = $idp.EntityDescriptor.IDPSSODescriptor.SingleSignOnService.Location[0]
10. $passiveLogOnUri = $idp.EntityDescriptor.IDPSSODescriptor.SingleSignOnService.Location[0]
11. Set-MsolDomainAuthentication -DomainName $domainName -FederationBrandName $domainName -Authentication Federated -PassiveLogOnUri $passiveLogOnUri -ActiveLogOnUri $activeLogonUri -SigningCertificate $signingcertificate -IssuerUri $issuerUri -LogOffUri $logOffUri -PreferredAuthenticationProtocol "SAMLP"