Google Apps and Android and iOS devices

[Brian Moon]

I just chatted with our team that administers Google Apps here, and there
was nothing special they had to do.  Older clients had an issue where they
were using IMAP and therefore using a Google mobile password rather than
SSO.  But a new client like Android 7 should not be having that issue.

When I try it on Android 7 I enter my email address and after being
> informed that the account is managed by our domain I accept the terms and
> privacy policy.  I then get a message saying that it couldn't sign in and
> there was a problem contacting our IdP (even though it did know the FQDN of
> our IdP).  From sniffing packets we don't see anything coming even near our
> IdP when we test this.

Since the packets never reach the IdP, this really sounds like a network or
firewall issue, especially since iOS devices and other systems are able to
reach it.

On iOS the behaviour is different.  When adding an account I am directed to
> our IdP and after authenticating I am sent back to the same screen to add
> an account.

iOS seems to be behaving much better, though.  When taken back to the
account page, did you click Save?  You're welcome to check out or guides
for accessing Google Apps from mobile devices to verify the steps your
trying:
https://www.scu.edu/technology/get-connected/mobile-devices/google-apps---android/
https://www.scu.edu/technology/get-connected/mobile-devices/google-apps---apple-ios/

Normal web auth works fine for things like Google Drive.  This only occurs
> on mobile devices regardless of where they live on the network.

Just to confirm, when you connect from your home network with a laptop or
desktop (and no VPN), you have no issues?  You are able to get a login
prompt on the IdP and successfully login?

Are there any error messages you see, or just clients timing out?


Brian Moon
Senior System Administrator
Enterprise Systems
Santa Clara University
Office: 408.554.4830
bmoon at scu.edu

On Tue, Jun 6, 2017 at 11:27 AM, Leonard J. Peirce <leonard.peirce at wmich.edu
> wrote:

> On 2017-06-06 02:16 PM, Brian Moon wrote:
>
>> As for the issue you're running into, is it only from mobile devices or
>> can you reproduce it from another system outside of your network?
>>
>
> Normal web auth works fine for things like Google Drive.  This only
> occurs on mobile devices regardless of where they live on the network.
>
>
> - Leonard
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170606/c4c4f5c0/attachment-0001.html>