GSDS query

[snagrat]

So we use both Office 365 and GSuite and want to sync both from AD.

 

I need to configure GSDS to pull the email address from only the upn regardless of what the mail or dns Suffix are.

 

DNS Suffix and Mail fields are used by AADConnect.

 

The GSuite domain is different to the Microsoft Office 365 one.

 

Is this possible?

[jthompson]

So we use both Office 365 and GSuite and want to sync both from AD.

 

I need to configure GSDS to pull the email address from only the upn regardless of what the mail or dns Suffix are.

 

DNS Suffix and Mail fields are used by AADConnect.

 

The GSuite domain is different to the Microsoft Office 365 one.

 

Is this possible?

 

GCDS has the option to replace whatever domain name comes in from the AD attribute.

 

GCDS -> Google Domain Configuration -> Connection settings -> "Replace domain names in LDAP email addresses with this domain name".

 

Therefore, if GCDS is using the 'mail' attribute from AD and those are in the form [email protected], but your Google domain is example.com, you can set that tickbox so that Google then identifies your users as [email protected]. Office 365 can then continue to use the 'mail' attribute and example.org.

[jthompson]

Worth noting, if you're also using the Google Password Sync utility, that unfortunately doesn't have that same option. To workaround that, we used a custom attribute in AD to store the Google account name for each user (i.e. [email protected]) and configured the Password Sync utility to use that attribute as the user ID. In our case, we used one of the 'extensionAttribute' fields in AD. You just have to remember to set that when creating new users, otherwise their Google password won't get synced.

[snagrat]

I did see that field and wondered what it did but then we do use the password sync.

 

However I could probably get away from this for just Staff and keep the password sync bit for Students as they do not sync to Office 365