Google Apps and Android and iOS devices

[Leonard J. Peirce]

On 2017-06-06 06:02 PM, Brian Moon wrote:
> I just chatted with our team that administers Google Apps here, and 
> there was nothing special they had to do.  Older clients had an issue 
> where they were using IMAP and therefore using a Google mobile password 
> rather than SSO.  But a new client like Android 7 should not be having 
> that issue.
> 
>     When I try it on Android 7 I enter my email address and after being
>     informed that the account is managed by our domain I accept the
>     terms and privacy policy.  I then get a message saying that it
>     couldn't sign in and there was a problem contacting our IdP (even
>     though it did know the FQDN of our IdP).  From sniffing packets we
>     don't see anything coming even near our IdP when we test this.
> 
> Since the packets never reach the IdP, this really sounds like a network 
> or firewall issue, especially since iOS devices and other systems are 
> able to reach it.

We checked and it's not a firewall issue.

>     On iOS the behaviour is different.  When adding an account I am
>     directed to our IdP and after authenticating I am sent back to the
>     same screen to add an account.

I checked your guides (very nice) and we're doing it the same way.

>     Normal web auth works fine for things like Google Drive.  This only
>     occurs on mobile devices regardless of where they live on the network.
> 
> Just to confirm, when you connect from your home network with a laptop 
> or desktop (and no VPN), you have no issues?  You are able to get a 
> login prompt on the IdP and successfully login?

The behaviour is the same anywhere.

> Are there any error messages you see, or just clients timing out?

No error messages and they're not timing out.  Android immediately
replies that it cannot contact our IdP.  iOS immediately returns to
the screen for adding an account.

- Leonard