Google Apps and Android and iOS devices

[Brian Moon]

We're using Google Apps and have that working just fine.  When adding an
account on devices it will send the login to the IdP, the user will
authenticate, and then the device will add the account.  So it certainly is
possible.  One thing that is important to note, though, is that users need
to be adding it as a Google Account (if they try to add it as an IMAP
account, then a Google mobile password will be used instead of SSO).

As for the issue you're running into, is it only from mobile devices or can
you reproduce it from another system outside of your network?


Brian Moon
Senior System Administrator
Enterprise Systems
Santa Clara University
Office: 408.554.4830
bmoon at scu.edu

On Tue, Jun 6, 2017 at 11:06 AM, Leonard J. Peirce <leonard.peirce at wmich.edu
> wrote:

> Before I try going down the Google Support rabbit hole I figured I
> would ask on this list.
>
> We have had Shibboleth working for Google Apps SSO for a while now.
> My question is:  has anyone who has setup Shibboleth for Google Apps
> been able to add an account for their managed domain on an Android
> or iOS device?
>
> When I try it on Android 7 I enter my email address and after being
> informed that the account is managed by our domain I accept the terms
> and privacy policy.  I then get a message saying that it couldn't sign
> in and there was a problem contacting our IdP (even though it did know
> the FQDN of our IdP).  From sniffing packets we don't see anything
> coming even near our IdP when we test this.
>
> On iOS the behaviour is different.  When adding an account I am
> directed to our IdP and after authenticating I am sent back to the
> same screen to add an account.
>
> Any insights would be greatly appreciated.
>
> - Leonard
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170606/cb2207fd/attachment.html>