Can I sign into Google automatically after logging into an AD machine?

[Jaan]

We've used Gsuite for about 5 years now and use AD sync to create accounts. We don't use the password sync app and also don't have a web based domain controller.

 

With the release of Google new File Stream, i've once again wanted to look at how to setup the users to be able to log into a domain machine, and have their google account automatically sign in.

 

Is this actually possible?, anybody doing this?

 

I've looked a SSo before but kinda got confused as it seemed to suggest that you sign in once manually, and all the Google services like youtube will automatically sign you in also.

 

Any pointers would be great as i'd really like the streamline this a little more.

 

Cheers all

[FN-GM]

We use ADFS and we can automatically log into Drive, Gmail, Calendar etc. However File Stream hasn't been built with SSO support (yet).

[Jaan]

Any pointers or articles that you think might be useful to us?

 

Not sure where to start with it if i'm honest.

 

thanks again

[Jaan]

We use ADFS and we can automatically log into Drive, Gmail, Calendar etc. However File Stream hasn't been built with SSO support (yet).

 

Are you using the Google password sync app to maintain both AD and Google passwords?

 

thanks

[FN-GM]

Are you using the Google password sync app to maintain both AD and Google passwords?

 

thanks

 

No, we are using the directory sync only. There is no need for password sync as ADFS will mange authentication.

 

Before I send some links, are you using ADFS already?

 

Thanks

[Jaan]

No, we are using the directory sync only. There is no need for password sync as ADFS will mange authentication.

 

Before I send some links, are you using ADFS already?

 

Thanks

 

No we don't currently use ADFS, it isn't installed on any of our 2 onsite DCs.

 

Thanks again

[Jaan]

No, we are using the directory sync only. There is no need for password sync as ADFS will mange authentication.

 

Before I send some links, are you using ADFS already?

 

Thanks

 

What if a user changes their Google password....say at home? (Sorry i'm probably getting ahead of myself here)

Edited March 7, 2018 by Jaan

[FN-GM]

What if a user changes their Google password....say at home? (Sorry i'm probably getting ahead of myself here)

 

There are no Google passwords when you setup ADFS. All authentication is handled by ADFS and uses AD passwords.

 

You will have 2 servers for ADFS. The main ADFS server will sit in your LAN and a Proxy server in your DMZ. This will protect the ADFS from the outside world.

 

Setup Guides

 

ADFS Setup

1. https://www.virtuallyboring.com/how-to-setup-microsoft-active-directory-federation-services-adfs/

2. https://www.virtuallyboring.com/setup-microsoft-web-application-proxy/

 

G Suite Settings

Google Apps and Active Directory Federation Services –

 

 

Once you're up and running use the following URLS to access services and it single sign on. You could put shortcuts on the start menu etc

 

https://mail.google.com/a/domain.com

https://drive.google.com/a/domain.com

https://classroom.google.com/a/domain.com

etc

Edited March 7, 2018 by FN-GM

[Jaan]

You're a star thank you.

[lmrogers]

There are no Google passwords when you setup ADFS. All authentication is handled by ADFS and uses AD passwords.

 

You will have 2 servers for ADFS. The main ADFS server will sit in your LAN and a Proxy server in your DMZ. This will protect the ADFS from the outside world.

 

Setup Guides

 

ADFS Setup

1. https://www.virtuallyboring.com/how-to-setup-microsoft-active-directory-federation-services-adfs/

2. https://www.virtuallyboring.com/setup-microsoft-web-application-proxy/

 

G Suite Settings

Google Apps and Active Directory Federation Services –

 

 

Once you're up and running use the following URLS to access services and it single sign on. You could put shortcuts on the start menu etc

 

https://mail.google.com/a/domain.com

https://drive.google.com/a/domain.com

https://classroom.google.com/a/domain.com

etc

 

Would Azure Web App Proxy work, so that you don't have to have a server sitting in the DMZ?

[FN-GM]

I don't know. Sorry.

[Reados]

Where does Google FS save the user credentials upon 1st login? Is there anyway to copy them to the user area when the user logs on after the initial set up. Running mandatory profiles and trying to avoid the need to constantly sign in.

[danbee]

@jahilton2002 did you ever get this to work? Were you able to get Chrome to sign in automatically for users? Thanks.

[Jaan]

@jahilton2002 did you ever get this to work? Were you able to get Chrome to sign in automatically for users? Thanks.

 

Sorry no, i got distracted. You know how it is.

[danbee]

I thought you might say that. Yes, I know! Thanks anyway.

[AlanD]

...I've never quite understood Microsoft federation services and ADFS....but have looked at the links...and as well as an ADFS server in school - you also have a Reverse proxy server which faces the outside work for clients to connect to/authenticate against. Where does Microsoft Azure come into this? Can you do SSO (for office 365 and other apps) without a premium azure Microsoft licence if you have your own reverse proxy for clients?

[FN-GM]

Can you do SSO (for office 365 and other apps) without a premium azure Microsoft licence if you have your own reverse proxy for clients?

 

Correct.