Gsuite/Chrome SSO via Office 365

[robk]

Not sure if this is possible...

 

We have Office 365 set up and working and SSSo works perfectly.

 

We also have Gsuite accounts set up to sync with Office 365 using the instructions here

 

What I now want to do is make Chrome auto log in to the users Gsuite account, and ideally youtube as well. we dont use gmail etc so those apps are turned off on the Gsuite platform.

 

Does anyone else do this, and if so how?..

[PlantHead]

We are just about to try this ourselves. I am hoping that by forcing users to login to Chrome before they use it, that SSO will kick in and the experience will be seamless.

Not tried it yet though

 

https://support.google.com/chrome/a/answer/7572556?hl=en&ref_topic=9312683

Using Group policies

 

On your Windows computer:

 

1. Open your Group Policy Management Console.
   
2. Go to User Configuration Policies Administrative Templates Google Google Chrome.
   
3. Enable Browser sign in settings.
   
4. Select Force users to sign-in to use the browser and click OK.
   
5. Enable Restrict which Google accounts are allowed to be set as browser primary accounts in Google Chrome.
   
6. Enter the pattern for the users you want to specify.
   
   • To specify all users in your domain, enter:
     ^.*@yourdomain\.com$
     
   • To only allow one user to sign in, enter:
     ^user-id@yourdomain\.com$
     
   • To allow users from both yourdomain1.com and yourdomain2.org domains to sign in, enter:
     ^.*@yourdomain1\.com$|^.*@yourdomain2\.org$
     

 

[*]Click OK.

[PlantHead]

Just for reference this doesn't work and I can't find a way around it.

Problem: Log into Windows with Domain account > Open Chrome > GPO forces sign in to Chrome > User is presented with a login box

I can't find a way to make Chrome use SSO and automatically sign in using the Windows 10 Credentials.

 

Anyone got any ideas?

[robk]

Just for reference this doesn't work and I can't find a way around it.

Problem: Log into Windows with Domain account > Open Chrome > GPO forces sign in to Chrome > User is presented with a login box

I can't find a way to make Chrome use SSO and automatically sign in using the Windows 10 Credentials.

 

Anyone got any ideas?

It's that last SSO step that's the problem isn't it.

 

Any ideas would be fantastic.

[robk]

Has anyone been able to set up a custom landing page? Just thinking if the g-suite logon happened via a URL maybe chrome would then pick up the account?

 

A custom start page with a few short cuts and a google search box might be ideal.

@Zoom7000 any ideas?

[Zoom7000]

Has anyone been able to set up a custom landing page? Just thinking if the g-suite logon happened via a URL maybe chrome would then pick up the account?

 

A custom start page with a few short cuts and a google search box might be ideal.

@Zoom7000 any ideas?

 

Unfortunately I don't have any sort of SSO to test this with and so my users just log in manually.

 

According to this reddit post what you've mentioned above should just work, unless I'm missing something.