google SP & new users

[Domingues, Michael D]

Google doesn't support "just-in-time" user provisioning via SSO. You'll want to use Google Cloud Directory Sync (https://tools.google.com/dlpage/dirsync) to synchronize your relevant users to their environment.


Michael

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Daniel McDonald <Daniel.Mcdonald at umb.edu>
Sent: Friday, October 19, 2018 2:24:53 PM
To: users at shibboleth.net
Subject: google SP & new users

Hi,

We've setup our shibboleth IDP to use google as an SP.

We've setup admin & some user accounts for our domain through the google
admin page. If I create an account for something like
bill.smith at mydomain.edu on the google admin page, when I goto login to
google and enter bill.smith at mydomain.edu it redirects me to the
shibboleth login page and it authenticates that account with our AD as
expected.

However if we have a user called jim.jones at mydomain.com in our AD, and I
havent added it manually added it to google, if I try to login with that
on google it says "Couldnt find your google account".

Is that how its supposed to work? I assumed google would work like our
other SP's, any account in our AD could authenticate without having to
add it to the SP's website/database/etc.

Thanks!
Dan


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181019/acc71b3e/attachment.html>