Google Workspace for Education - accounts.google.com issue

[fiza]

Many moons ago when we first set up our Google domain we blocked accounts.google.com/AccountChooser to stop students swapping to other accounts once they are logged in.

We now have a situation that I am sure didn't exist before where when students get work set in Google Classroom they get an email. Clicking the email link should take them to the Google Classroom but now they get "accounts.google.com" is blocked.

 

Should we be unblocking "accounts.google.com" to get the links to work?

[mavhc]

You can set Chrome to only allow logins to accounts with a list of domains you set, should work better

[fiza]

You can set Chrome to only allow logins to accounts with a list of domains you set, should work better

 

I should have mentioned, this is a BYOD scenario where we have loaded the Google management licence onto their Chromebooks. We want them only to log into school accounts whilst in school but be able to log into personal accounts when at home. We don't want them to be able to log into their school account in school and then be able to add any secondary personal account so they can swap between the 2.

[jthompson]

The sign-in page for lots of Google services, including Classroom, uses accounts.google.com. I can't think you'd be wanting to block it. I should think it also has a tonne of other URLs constructed from it, so that even if someone is already signed in, a link from a Classroom notification email will still want to go via accounts.google.com.

[fiza]

After some investigation I have found that unblocking accounts.google.com/Accountchooser has done the trick for us.

[jthompson]

Given that your students are using Chromebooks, how about the following?

 

In Google Admin > Devices > Chrome > Settings > Users & browsers > [select the relevant OU(s) containing your student users]

Scroll down to the User experience section and set Multiple sign-in access as Block multiple sign-in access for users in this organisation.

 

Not using that setup here, but I think that would then mean that when students are signed into their school account on a Chromebook, they'll be prevented from signing into another Google account alongside it (i.e. preventing account switching within Google web apps).

 

That setting is a user setting, not a device setting, so it shouldn't prevent your students from being able to sign into their Chromebooks with consumer Google accounts. Yes, they could still sign into their Chromebook with a consumer account in school, but I suspect that's not the problem you're wanting to address.