Populate the Alternate Email/Email Alias in Gsuite with AD Info?

[JRA]

Morning all,

 

Have a bit of an odd one. Feeling my way around a new place's Gsuite I've had PasswordSync just not work for a group of staff here. Discovered why the other day. We use both O365 AND Gmail here, and the group in question has a different email address in the mail field in AD to their Gmail address, so ofc that sync won't work being keyed to it.

 

I have discovered though that adding in the email address that appears in AD to the "Alternate email addresses (email alias)" in User information DOES then allow the PasswordSync to work. Question is though how to automate that.

 

Can GAM do it even? Has anyone reading also got this and solved it?

 

Thanks much any/everyone for any pointers!

[Steve21]

In GCDS add proxyAddresses to the user account alias attribute and it’ll pull them up

 

Steve

[jthompson]

In each instance of Google Cloud Password Sync (one on each of your DCs) it will have the AD attribute it uses to match with Google accounts. By default that's 'mail'. From your description, it sounds as though once your Google accounts have a match to the 'mail' value somewhere in the list of aliases (i.e. either the main account address or one of the alternate addresses), the the password sync will work.

 

Do you have your users' Google addresses in AD, just in an attribute other than 'mail'? If so, you could perhaps update each instance of Google Cloud Password Sync to match on that attribute instead of 'mail'. You then wouldn't need to add alternate addresses to users' Google accounts.

 

Edit: just noticed that this was only affecting a subset of your users, so adjusting the GCPS configuration to use a different attribute might break things for other users. I'd be surprised if GAM couldn't be used to add the alternate addresses to accounts. Assuming that it can, you'll be able to perform a CSV action to do a bunch of users in one go.

Edited January 20, 2022 by jthompson

[jthompson]

gam create|update alias user|group|target

 

e.g.

 

gam create alias [email protected] user [email protected]

[JRA]

Goodness you folks are wonderful thanks all!