Educational Software Thread, Microsoft live@edu Vs Google Apps for Education. in Technical; Am I correct in thinking that only Google Apps provides a free & easy to set up Active Directory Synchronization?...
26th October 2011, 09:50 PM #91
- Rep Power
Am I correct in thinking that only Google Apps provides a free & easy to set up Active Directory Synchronization?
26th October 2011, 10:54 PM #92
The Microsoft solution was 50 quid or something (Identitly Lifecycle Manager)
Originally Posted by memo512
26th October 2011, 11:02 PM #93
An administrator can export the mail in a mailbox (and previous mailbox states) and also setup monitoring on certain users. The easiest way is to use GAM.
Originally Posted by enjay
27th October 2011, 09:35 AM #94
It is free, and it is easier than ILM. It's not perfect though.
Originally Posted by memo512
ILM pretty much requires a dedicated server (certainly it is strongly recommended if not actually required). GADS requires a tiny amount of resources and has a very light install footprint. You can run it on pretty much any server you have without it interfering with the existing operation.
Originally Posted by RabbieBurns
The only real caveat with GADS is that if you want to sync passwords, you have to install a third-party component on each of your DCs to capture the passwords and store a hash of them ready to send to the Google Apps system. Why Google don't provide this themselves is beyond me, and the one that works most reliably (sha1hexfltr) doesn't keep the password hash very secure, so I implemented a workaround to move them to a confidential attribute in AD to be on the safe side. I still regard this as less demanding than setting up and running ILM.
In both cases (ILM and GADS), users will need to change their password before it starts syncing to Google Apps/Live@Edu. Neither can sync passwords that were set before they were installed.
27th October 2011, 09:46 AM #95
We found that password synchronisation is only necessary if staff students need to access picasa (not picasaweb) or log in via smartphones, for general web use we use a single sign on mechanism that authenticates google via active directory, which is technically a better method than capturing passwords.
Originally Posted by AngryTechnician
SSO via active directory can be achieved through a SAML based moodle plugin or something like simplesamlphp, shibboleth, oAuth, or a commercial solution. Some provide a password update facility to get active directory passwords directly into google. Were currently using SSOEasy SAML 2.0 and SAML 1.1 SSO Products - SSO Easy for this, but like i say; it's only really needed for picasa and smartphones, not general web use SSO covers the rest.
By somabc in forum Web Development
Last Post: 18th November 2009, 12:15 PM
By reggiep in forum General Chat
Last Post: 10th October 2008, 06:32 AM
By Andi in forum Courses and Training
Last Post: 4th April 2008, 09:51 AM
By russdev in forum Windows
Last Post: 1st November 2007, 12:55 PM
By thom in forum Windows Vista
Last Post: 8th February 2007, 09:40 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)