Using Google for authentication

[Tony Skalski]

We've been doing this for over 5 years, first with an OIDConnect-protected
reverse proxy in front of our Shib IdP, and after our upgrade to version 4,
via proxying to a SAML interface at Google. Our config also pulls
attributes from our on-prem AD, so we don't have to push a lot of
attributes to Google. It has worked well for us. We have a lot of apps that
do OAuth directly with Google so this provides a consistent login
experience for users. We also enforce Google 2-step for all users so we
didn't have to wire that up in the IdP per se. Happy to talk more about it.

ajs

On Tue, May 11, 2021 at 9:53 AM Chris Woods <cswoods at mtholyoke.edu> wrote:

> Hi All-
>
> Please forgive the highly speculative nature of this post. Assuming that
> Google Suite for Education is present and contains userdata and passwords,
> I wonder if it is possible to use Google in the place of AD or LDAP.
>
> Has anyone tried something like this or is it too far fetched?
>
> -Chris
> ---
> Chris Woods
> Systems Administrator
> Mount Holyoke College
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
*Tony Skalski*
System Administrator | IT

*Office: *507-786-3227 <(507)786-3227>
1510 St. Olaf Avenue Northfield, MN 55057
stolaf.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210511/c7c9d9fa/attachment.htm>