topic Re: Secure LDAP to log into macOS with Google credentials in Peer-Peer Topics

Secure LDAP to log into macOS with Google credentials

jstaime — Tue, 28 Nov 2023 15:17:11 GMT

Good Day Team,

I really need some assistance on this one...I would normally do research and test bed this, but we have a pressing situation going on at the moment preventing this...

Have any of you been able to successfully implement this?

https://workspaceupdates.googleblog.com/2020/12/secure-ldap-mac-os-google-login.html

If so, what were your challenges, success, "wish I had knowns" and so forth?

Any thoughts would be appreciated!!!

Re: Secure LDAP to log into macOS with Google credentials

rdnixon — Tue, 28 Nov 2023 15:23:47 GMT

We use it on a limited number of devices. Works fine. Faff to setup on the machine you use to clone to start with and the Google instructions are not that clear or I recall entirely accurate. Took a morning of fiddling to get it working.

Re: Secure LDAP to log into macOS with Google credentials

Kim_Nilsson — Tue, 28 Nov 2023 16:24:35 GMT

I got halfway, and then gave up as we, at the time, didn't have an MDM, nor do I ever want to touch new devices before the user logs in the first time. Now we have Mosyle, and just ponied up the cash for oneK12-version, so we can look into using their own Mosyle Auth 2, which will let users log into their Macs with their Workspace credentials.

An alternative I have been looking into a little is Xcreds. Cheap and can be free if you compile it yourself.

Re: Secure LDAP to log into macOS with Google credentials

jasoncrcsd — Wed, 29 Nov 2023 12:15:47 GMT

We use an MDM called Mosyle it has a google auth ability we use. I wasn;t aware we could do it with just Google. I'll have to try this if we ever get rid of our MDM

Re: Secure LDAP to log into macOS with Google credentials

jstaime — Thu, 30 Nov 2023 14:27:40 GMT

Thanks everyone for your response. We are going to dig into this. Glad to know @rdnixon it is working for you. Going to do our own deep dive now.

Thanks,

Re: Secure LDAP to log into macOS with Google credentials

lmcadams — Tue, 05 Dec 2023 12:31:55 GMT

I wanted to use this to reduce our reliance on Active Directory for a Mac Lab with JAMF, but was unsuccessful. The JAMF implementation could not support using it for logging into/authenticated on a mac. I was able to successfully use the secure LDAP to log in and validate with a 3rd party application.

Hope this help!

Re: Secure LDAP to log into macOS with Google credentials

Kim_Nilsson — Tue, 05 Dec 2023 15:18:00 GMT

Yeah, the problem with Google's Secure LDAP is the same as with Google's SAML.

Google just doesn't support enough of the expected attributes for it to work with other modern secure systems.