Google Services, SSO with AzureAD on Chromebooks

[Warwick_Tech]

Hi All,

 

I've been doing research into Chromebooks\android tablets as a cheap 'throwaway' 1-1 solution;

 

Given cheap tablets come with a host of rubbish and chromebooks need you to sign-in I was looking at merging Google services and AzureAD

 

apparently it is possible, but has anyone done it successfully? I would rather keep all our SLA's etc. under a Microsoft roof, but hey, the future is calling and we need cheap devices!

 

https://blog.theserverlessschool.net/2018/04/sso-from-chromebooks-to-azure-ad.html

 

This being said of course, Google have always spurned my attempts to talk to them about these services, hence my reservation - and tbh I'm not sure how the MDM of chromebooks works anyway!

[3s-gtech]

Our Google Workspace sign-in is entirely managed through Azure AD. Users sign into GW with their AAD login. Does give a slight quirk in that they have to enter their username twice on a Chromebook, but works nicely.

 

GW is added as an app in AAD, and users/groups are provisioned through that. We also use Salamander to create Classrooms etc. Chromebooks are managed in GW, the options for device management are pretty comprehensive.

[Warwick_Tech]

Our Google Workspace sign-in is entirely managed through Azure AD. Users sign into GW with their AAD login. Does give a slight quirk in that they have to enter their username twice on a Chromebook, but works nicely.

 

GW is added as an app in AAD, and users/groups are provisioned through that. We also use Salamander to create Classrooms etc. Chromebooks are managed in GW, the options for device management are pretty comprehensive.

 

This is kind of exactly what I was after - I assume however you need to sign up to Google Services? My issue is in the past I've never had anyone contact me RE inquiries, and even then I'm concerned about muddying the waters with classroom and teams etc.

 

 

When I last looked Google wanted to take control of everything, emails, domains etc. and this was deemed 'unacceptable'

 

Do you have a contact at Google I could shout out to?

[paulkerton]

Speak to a Google Education Partner. It is entirely possible. I did it at a Google training session. Married them up nicely, and used 365 to login to the Chromebooks.

You will still need an account on the Google side to match to the account on the AzureAD side, but it doesn't need to be used.

 

Vitalize, C-Learning, GeTech (not the vaccuum people) are good ones to reach out to.

[3s-gtech]

I transfered nothing to Google. I made sure the domain was verified (I think we did this with an external record on our DNS), but no transfer of email or owt.

 

Google Classroom sits here working but mostly unused. We use Teams, and that's pretty much it, but as we had Salamander booked in to integrate us I got the GW stuff done too.

[colly72]

We also have users sign into their Chromebooks using Azure AD. Google Enterprise App in AAD, which then provisions users from AAD into Google. You can also edit the app manifest to ensure that the provisioning of users puts them in the same OU structure in Google as there is in Azure AD.