Microsoft and Google

[E8419]

Hello

So lots of us have to deal with 2 systems.  Microsoft and Google.  

For the people who are mainly Google apps shops how do you handle authentication to Microsoft?  

Do you have your users maintain 2 separate 2 factor/account configurations?

Do you single sign on from one to the other?

Do you use Windows devices?  How do you manage them?

For our part here we try to use Google for as much as we can including log on with GCPW to Windows.  I am afraid that GCPWs MDM won't progress and that we will be forced to move toward intune.

We currently sync accounts from Google to M365 and use Google to SSO.

This Google SSO won't work to log into a Windows device, so if we have to move to intune we will need to move to a whole new sign on plus syncing system and possibly the maintenance of 2 separate accounts/have everyone that we already registered with Google 2FA register with Microsoft.

Plus we have already began using our 365 accounts synced from Google and I'm a little nervous switching sync sources will not be good.

[Dean_Mantz]

@E8419 I am having issues with my Google domain allowing me to connect to O365 as an SSO option. I have tried following Google's KB instructions but no luck. Do you have any suggestions for me? 

[Kim_Nilsson]

I use the templated O365 SAML, which works just fine.

All our teachers have Macbooks, and don't use Windows devices, and only use the MS account to login for our Sharepoint intranet.

People (mainly principals or other administrative staff) who use Windows have a regular MS AD (onprem) account, and there's an old-school AD-to-AAD/EntraID sync engine managing their accounts. So we have two federated domains in EntraID/AzureAD (lomma.se/AD, edu.lomma.se/Workspace).

Just recently we started managing our new Windows 11 devices in Intune (older AD devices are managed in MS SCCM), and so far we haven't been able to have users log in with their Google accounts to such a device. Instead those very few users are also assigned a fully synced AD/EntraID account.

We might be doing something wrong in Intune, but logging in with a regular EntraID works fine, and Workspace doesn't. Most likely this is Microsoft's fault.

[zdanenyc]

We use a third party IDP to access any tools so any authentication goes through that rather than Google or Microsoft SSO. The only time Google/Microsoft SSO is used if there is no IDP option and users must "Sign in with Google/Microsoft". Our IDP is connected through Intune as well (not sure of the particulars on that part) but it provides a roaming profile which has been great in terms of consistency of experience across devices.

Hope that that helps!

[E8419]

What 3rd party IDP do you use if I can ask?

[zdanenyc]

You can definitely ask! We have IBM Security Identity Manager

[dochxp]

We use Entra as our main IDP, with workspace accessed through this (MFA, etc). We also have AD for on-premises devices. It all seems to work OK. No third party IDPs.