[bromcom] Google User Provisioning

[Jaan]

Any schools using this feature that is using or had used the Google AD Sync tool?

 

We currently use Google AD Sync and have no issues.

 

However if we enable Bromcom's Google user provisioning, i'm worried its going to mess up the Google OU structure........ And if Bromcom creates something in our Google OU Structure..... the Google AD sync tool will remove it as it doesn't exist in our AD structure!...... my head hurts..... it too hot

[paulkerton]

Right. So the Bromcom tool will in theory match accounts, so you can synchronise those users with the data on Bromcom with users that you've matched up (either automatically or manually)

You can set GCDS to not delete accounts it doesn't recognise.

[Jaan]

Cool. i'll have to have a play.

 

Do you know if Bromcom provisions any user account that's added to the MIS or "system users" specifically?

 

cheers for the response

[Garacesh]

You can set GCDS to not delete accounts it doesn't recognise.

Don't do it this way. You still want it to at least disable accounts that aren't valid in AD (e.g. we use

(&(objectCategory=person)(objectClass=user)(mail=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

which defines any user object that has its e-mail attribute set, and is not disabled.)

 

In GCDS, you want the Exclusion Rules tab of the Google Domain Configuration page. GCDS will effectively ignore anything you add in there, such as user aliases, groups, or users that don't exist in AD.

For example, our school Governors get G Suite emails, but since they never log on to the domain, they don't exist in AD. Solution? Exclusion rule based on email address.

Edited July 22, 2021 by Garacesh

[paulkerton]

Do you know if Bromcom provisions any user account that's added to the MIS or "system users" specifically?

 

Any user that's in your MIS. Causes a few issues if one of your school has Trust users, but it'll provision a single domain (so school.org for all not school.org and trust.org - even if both are setup in Google)