Google Apps and ADFS/Azure AD for SSO

[PR-UK]

I've been looking at switching our Google Apps to ADFS (or more recently Azure AD) for SSO on and off for a few years. Has anyone else done this?

 

I'd like to test it but all the guides I've read say that as soon as you enable it everyone will be logged out of Google Apps even if you revert the changes.

 

How do iPads handle this? I guess the Google Apps now work ok, but what about the Mail app?

 

Are all logins the ADFS/Azure logins or do you still need your Google Apps login for certain functions?

 

Can you use Google Apps with Azure AD Basic? Are there any hidden costs?

 

Thanks

[mukz]

Hi PR-UK,

 

This might help,

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-google-apps-tutorial

 

Also @FN-GM might be able to help, if i remember correctly.

Edited May 17, 2018 by mukz

[FN-GM]

Hello,

 

Have a look at this post. I have set it up with on prem AD. - http://www.edugeek.net/forums/cloud-services/193902-can-i-sign-into-google-automatically-after-logging-into-ad-machine.html#post1657331

 

"Are all logins the ADFS/Azure logins or do you still need your Google Apps login for certain functions?"

 

They are ADFS users.

 

"How do iPads handle this? I guess the Google Apps now work ok, but what about the Mail app?"

 

Not sure about the built in app but the Gmail one just re-directs you to the ADFS login.

[PR-UK]

Thanks for that, do you know what happens with 3rd party services that allow you to 'Login with Google'?

[FN-GM]

They will just work with ADFS. No special config. Google knows your using SAML so handles it for you.