topic Re: Microsoft and Google in Peer-Peer Topics

Microsoft and Google

E8419 — Mon, 06 Nov 2023 23:53:38 GMT

Hello

So lots of us have to deal with 2 systems. Microsoft and Google.

For the people who are mainly Google apps shops how do you handle authentication to Microsoft?

Do you have your users maintain 2 separate 2 factor/account configurations?

Do you single sign on from one to the other?

Do you use Windows devices? How do you manage them?

For our part here we try to use Google for as much as we can including log on with GCPW to Windows. I am afraid that GCPWs MDM won't progress and that we will be forced to move toward intune.

We currently sync accounts from Google to M365 and use Google to SSO.

This Google SSO won't work to log into a Windows device, so if we have to move to intune we will need to move to a whole new sign on plus syncing system and possibly the maintenance of 2 separate accounts/have everyone that we already registered with Google 2FA register with Microsoft.

Plus we have already began using our 365 accounts synced from Google and I'm a little nervous switching sync sources will not be good.

Re: Microsoft and Google

Dean_Mantz — Tue, 07 Nov 2023 03:58:41 GMT

@E8419 I am having issues with my Google domain allowing me to connect to O365 as an SSO option. I have tried following Google's KB instructions but no luck. Do you have any suggestions for me?

Re: Microsoft and Google

Kim_Nilsson — Tue, 07 Nov 2023 06:44:33 GMT

I use the templated O365 SAML, which works just fine.

All our teachers have Macbooks, and don't use Windows devices, and only use the MS account to login for our Sharepoint intranet.

People (mainly principals or other administrative staff) who use Windows have a regular MS AD (onprem) account, and there's an old-school AD-to-AAD/EntraID sync engine managing their accounts. So we have two federated domains in EntraID/AzureAD (lomma.se/AD, edu.lomma.se/Workspace).

Just recently we started managing our new Windows 11 devices in Intune (older AD devices are managed in MS SCCM), and so far we haven't been able to have users log in with their Google accounts to such a device. Instead those very few users are also assigned a fully synced AD/EntraID account.

We might be doing something wrong in Intune, but logging in with a regular EntraID works fine, and Workspace doesn't. Most likely this is Microsoft's fault.

Re: Microsoft and Google

zdanenyc — Tue, 07 Nov 2023 13:26:39 GMT

We use a third party IDP to access any tools so any authentication goes through that rather than Google or Microsoft SSO. The only time Google/Microsoft SSO is used if there is no IDP option and users must "Sign in with Google/Microsoft". Our IDP is connected through Intune as well (not sure of the particulars on that part) but it provides a roaming profile which has been great in terms of consistency of experience across devices.

Hope that that helps!

Re: Microsoft and Google

E8419 — Tue, 07 Nov 2023 13:55:55 GMT

What 3rd party IDP do you use if I can ask?

Re: Microsoft and Google

zdanenyc — Tue, 07 Nov 2023 14:10:32 GMT

You can definitely ask! We have IBM Security Identity Manager

Re: Microsoft and Google

dochxp — Tue, 07 Nov 2023 19:03:20 GMT

We use Entra as our main IDP, with workspace accessed through this (MFA, etc). We also have AD for on-premises devices. It all seems to work OK. No third party IDPs.