Changes To Chrome And Google

If your organization uses SAML to sign users in to G Suite services*, those users will soon see an additional step in the process when using Chrome as their web browser. Starting on May 7th, 2018, after signing in on a SAML provider’s website, they’ll be brought to a new screen on to confirm their identity. This screen will provide an additional layer of security and help prevent users from unknowingly signing in to an account created and controlled by an attacker.

To minimize disruption for the user, this feature will only be shown once per account per device. We’re working on ways to make the feature even more context-aware in the future, meaning your users should see the screen less and less over time.

Protecting against phishing attacks
This new screen is intended to prevent would-be attackers from tricking a user (e.g. via a phishing campaign) into clicking a link that would instantly and silently sign them in to a Google Account the attacker controls. Today, this can be done via SAML single sign-on (SSO), because it doesn’t require a user interaction to complete a sign-in. To protect Chrome users, we’ve added this extra protection.

Creating a consistent identity
This new security feature is part of a larger project to create a consistent identity across Google web services (like Gmail) and native Chrome browser services (like Chrome Sync). This consistency will make it easier for signed-in G Suite users to take advantage of native Chrome browser features, but it requires additional protection during authentication. This new screen adds that protection and reduces the probability that attackers successfully abuse SAML SSO to sign users in to malicious accounts.

Disabling the new screen
If you wish to disable the new screen for your organization, you can use the X-GoogApps-AllowedDomains HTTP header to identify specific domains whose users can access Google services. Users in those domains won’t see this additional screen, as we assume those accounts are trusted by your users. This header can be set in Chrome via the AllowedDomainsForApps group policy.

*This won't impact individuals who sign in to G Suite services directly and those who use G Suite or Cloud Identity as their identity provider. The screen is also not shown on devices running Chrome OS.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release on May 7th, 2018

Available to all G Suite editions

Rollout pace:
Extended rollout (potentially longer than 15 days for feature visibility)

All end users

Change management suggested/FYI

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates
Posted: 25 Apr 2018 06:14 AM PDT
(Cross-posted from The Keyword)

Since the beginning, our aim with G Suite has been to help companies transform the way they work with our suite of cloud-based collaboration and productivity apps.

Today we’re announcing major updates to help the more than 4 million paying businesses that use G Suite work safer, smarter and more efficiently. This includes an all-new Gmail, with a brand new look on the web, advanced security features, new applications of Google’s artificial intelligence and even more integrations with other G Suite apps. We’re also introducing a new way to manage work on the go with Tasks.

Keep sensitive data secure with new Gmail security features

Keeping your data secure is our top priority, which is why last month, we introduced new phishing protections to help address Business Email Compromise (BEC) threats—or when someone impersonates an executive to get sensitive information. With these new protections, Gmail has helped block 99.9 percent of BEC attempts by warning users or automatically moving messages to spam for them.

Today, we’re introducing a new approach to information protection: Gmail confidential mode. With confidential mode, it’s possible to protect sensitive content in your emails by creating expiration dates or revoking previously sent messages. Because you can require additional authentication via text message to view an email, it’s also possible to protect data even if a recipient’s email account has been hijacked while the message is active.

New confidential mode in Gmail lets you set expiration dates for sensitive information.

Built-in Information Rights Management (IRM) controls also allow you to remove the option to forward, copy, download or print messages. This helps reduce the risk of confidential information being accidentally shared with the wrong people. Confidential mode will begin to roll out to consumer Gmail users and a limited number of G Suite customers in the coming weeks (broader rollout following).

We’ve also redesigned our security warnings within Gmail so that they are simpler to understand and give a clear call to action to employees. These bigger, bolder warnings will help you be even more informed when it comes to potentially risky email.

Bigger, bolder security warnings help you keep your company’s confidential information safe.

And it’s always worth a reminder: we do not scan Gmail for the purposes of targeting ads, and there are no ads shown in Gmail for G Suite customers.

Stay on top of email effortlessly using artificial intelligence in Gmail

New AI-powered features in Gmail, like Nudging, Smart Reply and high-priority notifications, can now help you spend more time on work that matters.

Most of us get more emails than we can deal with at one time, and sometimes things slip through the cracks. With Nudging, Gmail will proactively remind you to follow up or respond to messages, making sure you don’t drop the ball.

Now Gmail will intelligently (and subtly) “nudge” you when you need to prioritize actions in your inbox.

Last year, we introduced Smart Reply to our Gmail mobile apps. Smart Reply processes hundreds of millions of messages daily and already drives more than 10 percent of email replies on mobile. Today we’re bringing Smart Reply to Gmail on the web to help you respond to messages faster.

We’re also introducing new features on mobile to help you minimize interruptions and clutter. High-priority notifications is a new setting that only notifies you of important messages, keeping interruptions to a minimum. Gmail can also recommend when to unsubscribe from mailing lists. Using intelligence, unsubscribe suggestions appear based on cues like how many emails you get from a sender and how many of them you actually read. You’ll start to see these notifications show up in your inbox over the coming weeks.

New notifications on mobile help you stay focused on what’s important (and eliminate clutter, too).

Over the past few months, Salesforce has tested the new Gmail to collaborate on global projects. “As the global leader in CRM, the ability to quickly and securely communicate with our stakeholders around the world is critical,” says Jo-ann Olsovsky, executive vice president and chief information officer of Salesforce. “Gmail’s new easy-to-use interface and built-in intelligence enable our employees to collaborate faster and smarter, spending less time managing their inboxes and more time driving our customers’ success.”

Accomplish more from your inbox with easy-to-use tools

We redesigned the Gmail web application to help you take action even quicker. Now you can see and click attachments in your inbox before ever opening a thread. You can also hover over messages (you don’t have to click into them) to do things like RSVP to a meeting invite, archive an email thread or snooze an email until the time is right.

Gmail’s new design helps you take action quicker.

As a part of the redesign, we’re also tightly integrating Gmail with other G Suite apps you use every day. Now you can quickly reference, create or edit Calendar invites, capture ideas in Keep or manage to-dos in Tasks all from a side panel in your inbox.

The side panel also makes it easy to access Gmail Add-ons, like third-party business apps you might use. This way you don’t have to switch between tabs or apps to get work done. You’ll start to see the new side panel integration in other G Suite apps in the coming months—like inside of your Calendar, Docs, Sheets and Slides apps.

Use the new side panel in Gmail to access all of your favorite G Suite apps, like Google Calendar

New native offline capabilities in Gmail on the web can help you work without interruption when you can’t find Wi-Fi. Search, write, respond, delete, or archive up to 90 days of messages, just as you would working online, but offline. Teams can start using offline capabilities in coming weeks.

Like we mentioned, we’re introducing an all-new Tasks on web, as well as new mobile apps to help you handle work on the go. You can use Tasks to create tasks and subtasks, and even add due dates with notifications to help you stay on track.

Track projects and meet deadlines with Tasks’ refreshed design on the web and brand new mobile apps.

And because Tasks closely integrates with G Suite, you can simply drag and drop an email from Gmail into Tasks to create a to-do. Tasks with due dates can also appear in your Calendar. You can download the new Tasks mobile apps from the Google Play Store or iOS App Store today.

The all-new Gmail experience is available for businesses to start using today in the G Suite Early Adopter Program (EAP) and can be turned on in the Admin console. Read more detail on how to turn on the experience in this post. Heads up: you’ll start to see offline support, confidential mode (limited release), Nudging, high-priority notifications and unsubscribe suggestions appear in the coming weeks. Keep up with the latest news on these features in the G Suite Updates blog

Personal Gmail users can opt-in to the new experience, too (Go to Settings in the top right and select “Try the new Gmail.”).

Finally, if you need help getting started with the new Gmail, check out this Help Center article or this cheat sheet on our Learning Center

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates
Posted: 25 Apr 2018 06:14 AM PDT
We recently announced an Early Adopter Program (EAP) for the new Gmail. Below you’ll find additional details on the EAP, including how to opt in, the related Admin console settings, and the implications of certain features. If you haven’t yet checked out our post on the G Suite blog, we encourage you to do so before reading the information below.

Opting in to the new Gmail EAP

There’s no need to sign up for the new Gmail EAP; you can simply turn it on in the Admin console. You can enable the new Gmail EAP for your entire domain or for specific organizational units (OUs) only. Please note that it may take up to a day for the setting to appear in your Admin console.

Admin console settings to enable and disable the new Gmail EAP

Trying the new Gmail

After you’ve enabled the new Gmail EAP for your organization, your users will have the option to turn it on individually in their Gmail settings.

Option in Gmail settings to try the new Gmail

If they choose to, your users can continue to use the classic version of Gmail instead of the new UI. When we launch the new Gmail to general availability, you’ll have the option to force your users into the new UI. Note that if a user tries the new Gmail and wants to switch back to the classic version, he or she can do so from the Gmail settings menu.

Option in Gmail settings to go back to classic Gmail

Native offline support in Gmail

We previously announced that we’re moving Chrome apps, like Gmail Offline, to the web. As part of this effort, we’ll introduce native offline support to EAP end users in the coming weeks. We’ll follow up with an announcement on the G Suite Updates blog when the feature becomes available.

Native offline support will only be available to domains and users who’ve opted in to the new Gmail. At launch, it will be off by default for those domains, and admins will need to turn it on before it becomes available to their users.

Please monitor the G Suite Updates blog for more information.

Contact cards

We recently launched new cards that surface user profile information when people need it most, right inside G Suite apps. These cards will appear in the new Gmail, so we recommend uploading relevant information about your users to make the cards as useful as possible. For step-by-step instructions on how to populate these details, please visit the Help Center.
An example of a card that surfaces profile information

Gmail Labs

The new Gmail will include a number of enterprise-friendly features that exist only as Gmail Labs in the classic UI. For example, you’ll see canned responses, multiple inboxes, preview pane, and more as permanent features in the new Gmail. Users will be able to access these features from the Advanced tab in their settings.

Preview pane in the new Gmail

Turn on the new Gmail EAP today. For more information, check out the resources below.

More Information
G Suite Blog: With new security and intelligent features, the new Gmail means business
Help Center: What's new in Gmail
Learning Center: New Gmail Cheat Sheet
Learning Center: New Gmail FAQ

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates