Chromebook O365 sign in help

[jblackburnHWGA]

I'm using gsuite education. I have 500 chromebooks all working great. We're using O365 and have switched off most the google apps. gsuite is managing the mdm parts for settings and software. I want to switch to sign on using the students 365 credentials of the student rather than the gsuite address.

Theres some great guides out there which i've followed but i can't seem to get it working.

My problem i think is the domain names for 365 and gsuite don't match

my o365 is schoolname.org.uk

my gsuite is gsuite.schoolname.org.uk

All the students have exactly the same username in 365 and gsuite just the domain name is different.

should that matter? I didn't think it would. Surely i should be able to set the two to match up the username part of the user which does match between the two

[BKGarry]

It is worth checking out this webinar from Google, you can actually change them to login with the 365 login

 

[jblackburnHWGA]

I've seen this one. He refers to the usernames matching but on his example and all the other examples i've found both the username and domain matches. He also doesn't cover how to complete the whole setup.

I'll add my 365 domain into google and add a user under that domain to see if it works. If it does work the issue must be the domain difference and i'll figure out the rest if it still doesn't work it must be something i'm not setting correctly

 

I was hoping to find a school that has gone the same thing i'm trying to do

[jmak]

I'd highly recommend setting up Azure AD Connect and then using the built-in G Suite Connector by Microsoft application to set up SSO and provisioning.

 

In the Google Workspace admin console, you can set the Chromebooks to automatically add the domain, so that users don't have to type it in when they login.

 

I did have an issue with pre-existing Google accounts - the SSO login worked, but users didn't have access to their Google drive. Apparently it should work and ymmv, but it's recommended that you allow it to provision new accounts.

 

https://cloud.google.com/architecture/identity/federating-gcp-with-azure-ad-configuring-provisioning-and-single-sign-on