ChromeOS SSO to native Office 365 apps.

[martijn]

Hi all,

 

I'm currently working on a project where I'm testing Chromebooks as a replacement for Windows 10, so I have a Azure Active Directory with a couple of Office 365 users in it which is connected and syncs accounts to G Suite.

 

I followed this great guide: https://blog.theserverlessschool.net/2018/04/sso-from-chromebooks-to-azure-ad.html

 

...And within a short amount of time I was able to enroll my Chromebook with Azure AD credentials and login with my Office 365 account.

 

SSO to the Office 365 web apps works great, however when I install Excel, Word, Outlook etc from Play store those apps ask for my O365 credentials. If you login to one of these apps the others are fine as well but I want it to be fully SSO and not bother the user at all. This is critical for the acceptance by the company users.

 

I've been Googling all over the place but couldn't find an answer, hope somebody has an idea.

 

Thanks in advance!

[PotNoodleTech]

Sounds like a really interesting project!

[martijn]

Sounds like a really interesting project!

 

Thanks, yes I think so too

 

The idea is that 90% of the users can use just ChromeOS with the Office 365 (web)apps and Sharepoint. For all the legacy / Win32 apps they can connect to our Citrix farm and use published apps. Right now we have a lot of W10 laptops and they're such a pain to update, maintain, keep secure etc. not to mention the licensing cost.

 

I'm really convinced by ChromeOS for business use as well, not only schools.

[free780]

Microsoft need Windows 10 S for this with low cost devices. Perhaps not call it Windows as people think you can run Win32 apps. The issue will be when you get pressure to switch to Gsuite from Office 365.

[martijn]

Microsoft need Windows 10 S for this with low cost devices. Perhaps not call it Windows as people think you can run Win32 apps. The issue will be when you get pressure to switch to Gsuite from Office 365.

 

I think Office 365 is better than G Suite and Chrome OS is better than Windows 10 so I wanna use best of both worlds

 

Windows 10 S is a nice try but even Microsoft's own apps have better Android versions and nobody is developing for Windows Store.

[free780]

I know. The phrase rock and hard place comes to mind. I spent last week with a low powered laptop and Intune. But I can't see it working as well. The intune policy only refreshes every hour so if a staff member logged in they get the wrong policy. I get the sense the chromebook flies in the face of 1:1 devices. There is a shared PC Mode but it disables the onedrive sync client.

[Scorpio]

How did you get on with this ?

 

S

[Mr.Ben]

I really wish the OneDrive client would work with shared pc mode (with only files on demand), it would make the transition to using OneDrive so much easier for students!

[Scorpio]

What did you use for your SSO user indetifier on the Google App in Azure ? The Walkthrough you posted says use user.userprincipalname but the microsoft one says use user.mail ?

 

Thanks

 

S

[ifarmery]

Hello

 

We've done the same, the only way i could get it to work was to not install the apps but create a Chromebook homepage hosted on a local iis box with SSO links to each of these (using this website to generate the links) the only thing it does is on the first one ask if you want to stay signed in.

 

Hi all,

 

I'm currently working on a project where I'm testing Chromebooks as a replacement for Windows 10, so I have a Azure Active Directory with a couple of Office 365 users in it which is connected and syncs accounts to G Suite.

 

I followed this great guide: https://blog.theserverlessschool.net/2018/04/sso-from-chromebooks-to-azure-ad.html

 

...And within a short amount of time I was able to enroll my Chromebook with Azure AD credentials and login with my Office 365 account.

 

SSO to the Office 365 web apps works great, however when I install Excel, Word, Outlook etc from Play store those apps ask for my O365 credentials. If you login to one of these apps the others are fine as well but I want it to be fully SSO and not bother the user at all. This is critical for the acceptance by the company users.

 

I've been Googling all over the place but couldn't find an answer, hope somebody has an idea.

 

Thanks in advance!