[bromcom] G Suite Integration

[paulkerton]

Hello to @Bromcom_Support

I've sent you a DM about setting up G Suite Integration with yourselves. The DM explains in a little more detail what we are looking at, and I'm to understand that it will be in place in the late July release.

However, I could do with some feedback in regards to access rights needed to be able to set this up, as our MIS manager is only term-time, and the school would like this setup over August.

 

What I'd really like to avoid is the MIS Manager leaving over the summer without making sure I've got the correct access rights I'll need to be able to get this setup!

 

Thanks again,

Paul.

[Bromcom_Hus]

Hi Paul,

 

If you can send me your email in PM, I can send you product portfolio link which gives the required information also we can explain what permissions you required.

 

Regards

Hus

[timbo343]

Hi Paul,

 

If you can send me your email in PM, I can send you product portfolio link which gives the required information also we can explain what permissions you required.

 

Regards

Hus

 

Hi @HuseyinGuryel

 

Can you tell me if this is a "thing" in bromcom at the moment. I recall being on a webinar with yourself and Dan and we were initially told 24th July 2020, this has come and gone with no signs of any integration.

 

I was then told "the end of August". This has now come and gone.

 

I have told my SLT that "we are waiting for the Bromcom / Google native sync before creating any classes in Google Classroom. If Bromcom have not made this a feature by the 3rd Sept 2020, i will start to get concerned".

 

Have you got any news on this? The support guys seem a bit clueless about the Bromcom to Google native sync. Are we as a school going to have to purchase a third party tool? I don't want my teachers all managing their own classes. I would rather a native sync be running in the background so the classrooms in google hang off Bromcom.

[Bromcom_Hus]

Hi @HuseyinGuryel

 

Can you tell me if this is a "thing" in bromcom at the moment. I recall being on a webinar with yourself and Dan and we were initially told 24th July 2020, this has come and gone with no signs of any integration.

 

I was then told "the end of August". This has now come and gone.

 

I have told my SLT that "we are waiting for the Bromcom / Google native sync before creating any classes in Google Classroom. If Bromcom have not made this a feature by the 3rd Sept 2020, i will start to get concerned".

 

Have you got any news on this? The support guys seem a bit clueless about the Bromcom to Google native sync. Are we as a school going to have to purchase a third party tool? I don't want my teachers all managing their own classes. I would rather a native sync be running in the background so the classrooms in google hang off Bromcom.

 

Yes it is. Please send me your contact details, and I can share the guide/documentation with you. I will pass this feedback to our Support Manager to see why you have been given that impression by support guys.

[paulkerton]

Hi Timbo...

I have it now, so it should be available to you. There is an extra cost involved, but it is definitely available, and working well for us!

[timbo343]

Yes it is. Please send me your contact details, and I can share the guide/documentation with you. I will pass this feedback to our Support Manager to see why you have been given that impression by support guys.

 

Will PM you now

[timbo343]

Hi Timbo...

I have it now, so it should be available to you. There is an extra cost involved, but it is definitely available, and working well for us!

 

I got told it was free of charge if schools have the OneStopShop which is what we have.

[paulkerton]

I got told it was free of charge if schools have the OneStopShop which is what we have.

 

I think it might be. We don't have the OneStopShop

[Theblacksheep]

I got told it was free of charge if schools have the OneStopShop which is what we have.

 

Licences were not allocated as they might have been ironing a few things out, we put in a request last week (and one month ago) for Google licences and the new features are starting to be available in our schools today.

[timbo343]

Sure. I can confirm if you have OneStopShop then there is no charge however i need to speak to customer services to get it activated.

[timbo343]

Hi Timbo...

I have it now, so it should be available to you. There is an extra cost involved, but it is definitely available, and working well for us!

 

@paulkerton @HuseyinGuryel

 

Just out of interest, what happens if we have GCDS setup and have the Bromcom to Google sync setup as i have read the following from the setup guide?

 

User Provisioning

This will allow the system to match the information we have on your Staff and Students to your G Suite Users. Any new Staff and Students created in the MIS will automatically have a G Suite Account created for them. Any Staff or Students who leave your school will automatically have their G Suite User Account suspended. Once this option is ticked the User Provisioning Configurations panel will display where you can Configure the User Sync, what email address format you want to create for Students and Staff and Set OU Path (Organisational Unit) for Students and Staff. If you do not set this option the system will generate its own OU Structure.

 

What happens if the MIS sync to google runs before the GCDS sync? Is there a clash?

 

How often does the sync run?

 

The instruction guide that @HuseyinGuryel sent out needs a bit clarifying. I had to tidy up the OAuth Scope list before Google would accept it.

 

Here is the complete list as when copying the one from the PDF, it copies next liens with spaces.

https://www.googleapis.com/auth/admin.directory.user,

https://www.googleapis.com/auth/admin.directory.user.readonly,

https://www.googleapis.com/auth/admin.directory.userschema,

https://www.googleapis.com/auth/admin.directory.userschema.readonly,

https://www.googleapis.com/auth/cloud-platform,

https://www.googleapis.com/auth/admin.directory.orgunit,

https://www.googleapis.com/auth/admin.directory.orgunit.readonly,

https://www.googleapis.com/auth/admin.directory.group.member,

https://www.googleapis.com/auth/admin.directory.group.member.readonly,

https://www.googleapis.com/auth/admin.directory.group,

https://www.googleapis.com/auth/admin.directory.group.readonly,

https://www.googleapis.com/auth/apps.groups.settings,

https://www.googleapis.com/auth/admin.directory.resource.calendar,

https://www.googleapis.com/auth/admin.directory.resource.calendar.readonly,

https://www.googleapis.com/auth/classroom.courses,

https://www.googleapis.com/auth/classroom.courses.readonly,

https://www.googleapis.com/auth/classroom.rosters,

https://www.googleapis.com/auth/classroom.profile.emails,

https://www.googleapis.com/auth/classroom.profile.photos,

https://www.googleapis.com/auth/classroom.rosters.readonly

 

I'm sure i will have other questions about this as we go along so will keep this thread up to date just in case others have the same questions.

 

If user accounts are created via the Bromcom sync before GCDS is run, can we delete the Bromcom sync'd accounts and then re-run GCDS to create the user account?

[Bromcom_Hus]

Hi Tim,

 

Please see my comments for the questions you put through;

 

@paulkerton @HuseyinGuryel

 

Just out of interest, what happens if we have GCDS setup and have the Bromcom to Google sync setup as i have read the following from the setup guide?

 

This should not cause any issues as these are independent from each other.

 

 

What happens if the MIS sync to google runs before the GCDS sync? Is there a clash?

 

There is no possibility of clash. All staff and student accounts will be managed by Bromcom MIS. If an account needs to be created manually before the date student or staff joins, then adding the created Google email address into Student or Staff records as "Work Email Address" - you will avoid any clash or duplications that sync will create.

 

How often does the sync run?

 

Once a day between 1am to 6am

 

If user accounts are created via the Bromcom sync before GCDS is run, can we delete the Bromcom sync'd accounts and then re-run GCDS to create the user account?

 

Not sure why you would need to do this, but yes you can deactivate/create any of the Bromcom generated accounts.

[paulkerton]

I wouldn't use both Bromcom and GCDS sync personally. I guess you're using GCDS to create your users from AD at the moment?

[timbo343]

I wouldn't use both Bromcom and GCDS sync personally. I guess you're using GCDS to create your users from AD at the moment?

Yes that's right.

 

Honestly, we are only wanting to sync Bromcom with Google for the Google Classroom Groups so teachers don't have to manage their own classes.

[paulkerton]

Yes that's right.

Honestly, we are only wanting to sync Bromcom with Google for the Google Classroom Groups so teachers don't have to manage their own classes.

In that case, make sure all your staff have their G Suite email address in their Bromcom staff record before you do any syncing. That way, they'll just match up the existing accounts created by GCDS, rather than attempt to create new ones. There is a Simulate Sync button, so you can see what it plans to do in advance.

Do you also use GCDS for the student accounts? If so, the same applies. Make sure their G Suite account email address is in their student record.

 

Then Bromcom Sync will work it's magic matching the existing users in G Suite to their Bromcom profile, so it can sync the classroom permissions etc.

[timbo343]

Thanks. Can auto sync every night / morning ve turned off as i can see a student record (and staff record) being created before we create the account in AD?

[paulkerton]

Thanks. Can auto sync every night / morning ve turned off as i can see a student record (and staff record) being created before we create the account in AD?

Yes. We currently have it switched off to avoid any teething troubles before we move to automate it. @HuseyinGuryel should be able to sort this for you

[timbo343]

One last thing, if we have a google domain that has subdomains, for example - school1.mat.co.uk and school2.mat.co.uk and school2.mat.co.uk do we configure this as Primary or Secondary?

 

Also can the Superadmin account have 2fa enabled?

Edited September 2, 2020 by timbo343

[timbo343]

With massive help and thanks to @HuseyinGuryel we now have our groups in G-Classroom.

 

I've since found out that the account that Bromcom uses and created in GSuite (classroomteacher-xxxxx@) needs to have all emails deleted that land in it's account via a filter / rule.

 

Also, you can use this service account to view all the G-Classrooms to check memberships as well as use GAM. This service account becomes one of the teachers for each classroom. Just make sure you give it a very secure password once it has been created and it's usually set in the Top level OU in GSuite Users.

[paulkerton]

With massive help and thanks to @HuseyinGuryel we now have our groups in G-Classroom.

 

I've since found out that the account that Bromcom uses and created in GSuite (classroomteacher-xxxxx@) needs to have all emails deleted that land in it's account via a filter / rule.

 

Also, you can use this service account to view all the G-Classrooms to check memberships as well as use GAM. This service account becomes one of the teachers for each classroom. Just make sure you give it a very secure password once it has been created and it's usually set in the Top level OU in GSuite Users.

 

Do you have an example of the rule you're using at all?

[timbo343]

Here are the rules i have created:

 

 

 

 

Not perfect but does the job for now.

[timbo343]

Is anyone using Bromcom integration for MATs and multiple subdomains of MATs?

 

We have a shared 6th form and i would like students from "otherschool" to use their google accounts to access our classes.

 

The students from "otherschool" are in Bromcom and assigned to our classes. I have added them to the sync exclusion rules.

 

We manually invite the "otherschool" students to join the class but when classes are sync'd from bromc to Gsuite, these students are removed from the class.

 

Is there a way round this? Ideally, i do not want to give the students from the "otherschool" one of our gsuite accounts as it just seem pointless especially when there is the function to do this in Classroom.