G Suite Single Sign In

[msi_school]

Hi

 

We are looking to start using Google classroom across the school, with our Office 365 we use the Seamless Single Sign-On process to make life a little simpler.

 

I have looked at the G Suite SSO options and as i understand the documentation it does not do the same thing, using a local logon to authenticate to the cloud.

 

Could anyone advise if I am correct or am I reading the documents wrong?

 

Thanks

 

Mike

[ShellfishClive]

There isn't a way that your windows logon can single sign you into Google unfortunately.

[msi_school]

Thank you @ShellfishClive that is a pain but atleast I know.

[3s-gtech]

If you add G Suite to your Azure AD configuration, it will pass the auth across from Office 365 to G Suite. Essentially, it will allow SSO that way. It’s how I’ve set it up and it works well - also allows you to use some of the Azure features like AD synced groups in G Suite.

[ShellfishClive]

If you add G Suite to your Azure AD configuration, it will pass the auth across from Office 365 to G Suite. Essentially, it will allow SSO that way. It’s how I’ve set it up and it works well - also allows you to use some of the Azure features like AD synced groups in G Suite.

 

I didn't know that was a way! I've tried looking into that before but couldn't see it working, I guess I'm mistaken!

[3s-gtech]

It works fine. I found that I needed to add two instances of G Suite to Azure - one does user syncing, while the other does general settings. When I tried to do it all with one instance, the syncing wouldn't work reliably. This is a bit of a 'known' issue with it, but it's extremely simple to fix and seems to work well once done.

[msi_school]

Thanks, I will have a look at this

[jmak]

I found it worked fine too - and as you can pre-populate the domain in the G Suite admin console, you can even sign in to Chromebooks with the same username as you have in AD.

 

The only issue I had was with users who had existing accounts in GSuite - the sign in worked, but then they got a server error message (returned from Google) and no access to the GSuite services. MS blamed Google and Google blamed MS. Resolved eventually by deleting the accounts in GSuite and recreating - was a bit of a pain as I had to purge all record from Vault etc before I could recreate a user with the same name.

 

To be clear, the actual SSO was seamless and worked fine.

[martinlindau]

If you add G Suite to your Azure AD configuration, it will pass the auth across from Office 365 to G Suite. Essentially, it will allow SSO that way. It’s how I’ve set it up and it works well - also allows you to use some of the Azure features like AD synced groups in G Suite.

 

Hi,

 

Sorry to dredge up an old post.

 

I am also looking at this at the moment. The SSO works well from Azure AD to G Suite.

 

How did you deal with the lack of OU sync from Azure AD? I can see now that you can now apply services to groups of users in G Suite, but it still looks like you need OUs to apple policies for user device settings.

 

Cheers,

 

Martin

[dhicks]

How did you deal with the lack of OU sync from Azure AD? I can see now that you can now apply services to groups of users in G Suite, but it still looks like you need OUs to apple policies for user device settings.

 

Not really a direct answer to your actual question, but since the original post was created Google now do their own MDM:

 

https://gsuite.google.co.uk/intl/en_uk/products/admin/endpoint/

 

That includes GSuite sign-on integration for Windows - I haven't had a chance to try any of the setup of features yet, although I've just noticed there's some sort of support for MacOS and Linux too.