Authenticate Windows 10 devices with GSuite Enterprise

[mavhc]

https://gsuiteupdates.googleblog.com/2020/01/windows-10-gsuite-admin-single-sign-on-sso.html

 

Requires Education Enterprise though, alternative to Azure AD join it seems

[rogerdnixon]

Had a quick play with the new release (I've been an alpha tester):

 

You can actually sort of use it without enterprise licenses if all you want to do is sign in with a G Suite account. If you have enterprise licenses, then you get Windows Management in you G Suite management console. However, you can use this on AD joined and Azure joined PCs. Longer-term I'm hoping for just one management console so I don't need Azure/Intune for where we need PCs still.

[Mr.Ben]

I'm struggling to understand how it will gain traction in education, especially if it is only Edu Enterprise.

 

Even at the 'special offer' rate of $2 per month, that's over £180k per annum for our Trust vs using Azure and M365 at £48k per annum.

 

No chance anyone sensible would look at that and think it's good value.

[localzuk]

Yeah, the pricing is way off for what they offer.

[rogerdnixon]

I'm trying to establish how many licences you actually need. From my testing - the minimum of 10 a year seems to do it. That's around £480 per year. The testing I've done so far is with no licence - getting so trial ones this week - so will test a bit more once I have them.

[rogerdnixon]

OK - just got clarification from the enterprise team - you only need enterprise licenses for the people doing the enrollment (so IT Support). So my quote for 10 users annually is £420 - so that the cost. So I might be using this in my new deployments - we shall see.

[Arthur]

Google Credential Provider is now generally available.

 

https://gsuiteupdates.googleblog.com/2020/04/enhanced-security-windows-10-google-login.html

 

You can now manage and secure Windows 10 devices through the Admin console, just as you do for Android, iOS, Chrome, and Jamboard devices. This also means you can enable SSO so users can more easily access G Suite and other SSO-enabled applications on Windows 10 devices. This was previously available in beta.

 

Now, all G Suite admins can now use Google Credential Provider for Windows to:

 

• Enable their organization to use existing G Suite account credentials to login to Windows 10 devices, and easily access apps and services with SSO.
  
• Protect user accounts with Google’s anti-hijacking and suspicious login detection technologies.
  

Additionally, G Suite Enterprise, G Suite Enterprise for Education, and Cloud Identity Premium customers can now also:

 

• Ensure that all Windows 10 devices used to access G Suite are updated, secure, and within compliance of organizational policies.
  
• Perform admin actions, such as wiping a device and pushing device configuration updates, to Windows 10 devices from the cloud without connecting to corp network.
  

This can help simplify device management, help to increase data security, and reduce the hurdles and logins users need to access applications and get work done. See our previous announcement for more details on the Windows 10 management features and benefits.

 

See our Help Center to learn more about enhanced desktop security for Windows. See our post on the Cloud Blog to learn how this and other launches can help G Suite customers stay secure.

 

Availability

 

Login and SSO features associated with Google Credential Provider for Windows:

 

• Available to all G Suite and Cloud Identity customers
  

Device management for Windows 10 devices:

 

• Available to G Suite Enterprise, G Suite Enterprise for Education, and Cloud Identity Premium customers
  
• Not available to G Suite Basic, G Suite Business, G Suite for Education, G Suite for Nonprofits, and Cloud Identity Free customers
  

[Arthur]

Related thread: www.edugeek.net/forums/windows-10/214975-googles-windows-10-mdm-out-beta.html

[RebelBurr34]

Thank you for your sharing.