Chromebooks / Azure SSO / SSL Decryption

[CyBeRkId2002]

Hi all,

 

I am struggling to get the above three factors working and playing together nicely.

 

My issue is that:

 

• Whilst the Azure Sign-In Page is excluded from TLS decryption, the response it sends to Google is at http://www.google.com/a/domainname
  
• our ISP only seems to allow exclusions to TLS based on domain name, not specific sub-pages. I am not prepared, for obvious reasons, to disable SSL inspection for Google
  
• It seems impossible to install a certificate that applies to the chromebook device before sign-in (effectively a guest user)
  
• 
  

 

I have been racking my brain but can't think of other options here. Wondered if anyone had been through this and found a fix? Obviously I could disable SSO and authenticate via Google but this seems like a bit of a compromise. Can anyone see any other options (other than finding a more flexible filtering platform)?