SSO in Google Mail
We use Google Apps for Education, and I've been asked about single sign-on. We already have passwords syncing between our network and Google Apps, but I've been asked to look into removing the need to separately log in to Google Mail.
Has anyone else done this, how easy is it to set up, what would I need to have, and what are the risks/problems? What other things do I need to know/consider before deciding? We would need to retain remote access to Google Mail, including from phones.
Very simple to do with Active Directory.
There are many possibilities. Ask these guys for a free trial if your worried about setting up something yourself
SAML 2.0 and SAML 1.1 SSO Products - SSO Easy the do integration to other things such as moodle as well.
Thanks. Nothing like Moodle in place, so the only thing that it could authenticate against is AD. Would it be able to pick up the logged on user and use that to log in to Google, or does it need the user to be logged in to something web-based first?
I think the latter unless you can do some form of NTLM passthrough
At present, they log in to the network and again to email and it is those two logons which we're trying to reduce to one. If they have to log in to the network, then %website% then get automatically authenticated with Google, they still have the same number of steps.
I'll go back and tell people it can't be done :-)
It would appear that there might actually be budget to facilitate this, so I'm back to talking to third parties - can anyone else recommend a company who could assist us with this?