Jump to content

Recommended Posts

Posted
Can I ask how people login to their Chromebooks? Can they be setup so users just login with their google email adress and password?

We would be sharing them with multple classes so need a quick way to get into them

 

We use Azure AD SSO with our student 1:1 Chromebooks. Works flawlessly and allows us to leverage our Azure Conditional Access MFA for students when at home.

  • Thanks 1
Posted
We use Azure AD SSO with our student 1:1 Chromebooks. Works flawlessly and allows us to leverage our Azure Conditional Access MFA for students when at home.

 

Does that require them to enter their full email as a username?

Posted
Does that require them to enter their full email as a username?

 

Yes, but the advantages of a single sign in provider outweigh any downsides.

 

We just have on our Azure Sign in page an example of a full email address, so students can copy that.

Posted
Does that require them to enter their full email as a username?

 

You can mandate a domain within Google's chrome device management settings, so (assuming username=email@domain) they only need their username.

  • Thanks 1
Posted
Can I ask how people login to their Chromebooks? Can they be setup so users just login with their google email adress and password?

We would be sharing them with multple classes so need a quick way to get into them

 

If you don't set restrictions by default even an School managed Chromebook will allow private Gmail users to log in. This can be restricted to just the school domain if you have a Google Workspace domain.

 

If you are going pure Google each pupil and staff member has a school account on your Google Workspace domain and they can log directly into the Chromebook with that.

 

You can leverage other IdPs such as Azure and sign into the Chromebook with other identities if required.

Posted
Yes it does. We are currently looking at something like Wonde mylogin (https://mylogin.com/) which allows for login via magic badge for the younger students.

 

Aaahhh, so Wonde haven't totally got out of the MagicBadge game then! They've just hived it off to mylogin

Posted
You can mandate a domain within Google's chrome device management settings, so (assuming username=email@domain) they only need their username.

 

This might work with Google login but it doesn't when using Azure SSO.

Posted
This might work with Google login but it doesn't when using Azure SSO.

 

So we can either password sync to Google and use the Google login and not require a full email, or use the Azure AD login and benefit from things like conditional access that we pay for, but require a full email?

Posted
So we can either password sync to Google and use the Google login and not require a full email, or use the Azure AD login and benefit from things like conditional access that we pay for, but require a full email?

 

That's how I see it. Conditional access is a must for us, so Azure SSO was the obvious way to go. We use the Schools IP as the 2nd factor when Senior School students are connected to the school network but require them to use the Authenticator app on their mobile device when at home.

Posted
That's how I see it. Conditional access is a must for us, so Azure SSO was the obvious way to go. We use the Schools IP as the 2nd factor when Senior School students are connected to the school network but require them to use the Authenticator app on their mobile device when at home.

Google SSO also provides this, they call it 'context aware access' and it's free on educational standard, IIRC the Azure version is a paid extra.

  • Thanks 2
Posted (edited)
Google SSO also provides this, they call it 'context aware access' and it's free on educational standard, IIRC the Azure version is a paid extra.

 

Free on Education Standard, which isn't free. I take your overall point though, which is that Google also has its own conditional access feature, albeit in a paid subscription.

Edited by colly72
  • Thanks 1
Posted
Free on Education Standard, which isn't free. I take your overall point though, which is that Google also has its own conditional access feature, albeit in a paid subscription.

 

oh what's the free one called now? They keep renaming everything.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...