Chromebooks when using Federated Google Accounts with Microsoft 365 being the idP - login twice.

[mikeglover]

Hi all,

 

We are looking to transition to Microsoft 365 away from Google.

But we have about 600 chromebooks

I'm looking at federating our Google Workspace accounts with Microsoft 365. So Microsoft is the idP in this scenario.

I've got it setup with some test accounts but the experience login into a chromebook is.

Type in username in the Chromebook login screen. > It redirects to our Microsoft 365 login screen. Asking again for the username (which is identical). Then password, and finally login.

I'm trying to avoid the typing in of the username twice as this is a bad user experience.

ChatGPT and other AI are running me around in circles says it can be done but I've yet to find a solution.

 

I'm interested to know any school that have been in our scenario of being a Microsoft 365 school and having Chromebooks.

 

Appreciate any help you can give. 🙂 

 

[Discovery1031]

I can't remember if this does what your asking but under Device settings search for SAML and click Single sign-on IdP redirection then select redirect users to SAML SSO ldP

 

[paulkerton]

Google are currently doing a live doing a session on Microsoft 365 and Google/Chromebooks

 

https://educationonair.withgoogle.com/events/edu-on-air-k12-emea?tab=default-tab&expand=module:upcoming-sessions&category=2

[PotNoodleTech]

42 minutes ago, mikeglover said:

Hi all,

 

We are looking to transition to Microsoft 365 away from Google.

But we have about 600 chromebooks

 

 

Ummmm......what?  Why?  Makes zero sense?

[paulkerton]

43 minutes ago, PotNoodleTech said:

Ummmm......what?  Why?  Makes zero sense?

 

Usually because someone higher up with no grasp on the current and the future has decided they want a certain function.
For example once I was told by a very senior decision maker "I don't like Google Docs because of how the tables are formatted, we should be Microsoft"
Literally the cost difference was 2 full time teaching staff, but people have some very weird priorities.

Edited June 5, 2025 by paulkerton

[mikeglover]

On 05/06/2025 at 10:59, PotNoodleTech said:

Ummmm......what?  Why?  Makes zero sense?

 

Strategically there are a lot of things that makes sense for us to go to Microsoft. And I know that it is different for every school. I'm not getting dragged into a fighting match of which is better.
I can't right off a massive amount of Chromebook hardware, so looking to make the most with what we have. 🙂

[DrCheese]

As above, you want the 

 

"SAML-based Single Sign-On for Chrome OS devices"

 

Set to enable

 

& The redirect option above.

 

As a 365 school, we have around 200+ chromebooks setup like you're trying to do. M365 sign in (Once) & then I've butchered all the entry points to Gsuite (tbh, we have it all disabled in general)

 

They work brilliantly. If you put on Smoothwall cloud filter as well, that can pick up the logged in user name.

 

It annoys me so much that MS don't have an "Edgebook" - Instead keep trying with rubbish "S" versions of Windows..

 

 

 

[mikeglover]

Thank you DrCheese and Discovery1301. That has worked. Though briefly this morning and now getting a error. AADSTS7000016 Application with identifier error so I need to trace my steps back and find what I've broken but at least I've seen it working. 😀

[gooner2004]

@DrCheese my school has just signed up to Mylogin using Chromebooks and was told that Office 365 would be available as a SSO but have found out this isn't the case. Would you be able to message me to discuss how I can enable the chromebooks to have SSO to access MS apps please. 

[BKGarry]

I actually know these settings for once, I set them during summer when I moved my chromebooks over to authenticating with 365.

 

You want to set the SAML Cookie and the Autofill setting below, this will pass over the email address and take them straight to the password entry box. 

 

[gooner2004]

@BKGarry thank you, that's really helpful. Appreciate your help.