Solved

Google Auth for SSO to Office 365

Posted on 2016-10-10
4
33 Views
Last Modified: 2016-10-30
Is anyone using Google Apps Auth for SSO to Office 365?

We use Google Apps for email and are starting to use Office 365 for MS Office Suite Management with a domain account.  I can see my manually added Office 365 users in Azure AD.

I'm using G Suite's (Google Apps) administrator help page - Using SAML to set up federated SSO - Pre integrated applications N through Z - Office 365 cloud application.  The URL is: https://support.google.com/a/answer/6363817?hl=en

It seems to give good step-by-step instructions for accomplishing the task.

From the first section "Set up Office 365 as a SAML 2.0 service provider", I need to:
 - install Azure AD Connect to get the rest of my user accounts in Azure AD/Office 365
 - install AD FS for the federation

After this, step #6 states to configure the IdP certificates and set the URL using the Active Directory PowerShell on your federated Active Directory Domain.

I haven't used PowerShell to configure certificates or to set a URL, so I was wondering if anyone could provide guidance on the syntax for these commands or if there is a PowerShell script?

In case it's helpful, my domain controllers are Server 2012 R2.

If additional information is needed, please let me know.

Thank you for any assistance you can provide.
0
Comment
Question by:lshriver
  • 3
4 Comments
 
LVL 36

Expert Comment

by:Jian An Lim
ID: 41837896
Can you explain in plain english what you want?

DO you want the user to use password from Google Apps, then login to Office 365
OR you want the user to use password from Office365, then login to Google Apps?

##########

NOTE: no, you don't need to install AADConnect and ADFS if you password is managed by Google apps.
NOte: you don't need to install ADFS to get the password over, it will much easier to use password sync and do the same job.
0
 

Author Comment

by:lshriver
ID: 41838244
Jian An Lim,

I apologize, if I wasn't clear.

I want the user to use password from Google Apps, then login to Office 365.

Can you help with the steps necessary to accomplish this?

Thank you.
0
 
LVL 36

Accepted Solution

by:
Jian An Lim earned 500 total points (awarded by participants)
ID: 41839303
Cool

But before i go on, i need to tell you, Microsoft have not supported google IDP as authentication.
If you read https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect-federation-compatibility/  

So how Google try to sell you this is the password sync back to On-premises AD then use ADFS to expose it to Office 365, which defeat the whole purpose. It is not a true Gmail to Office 365 SSO.

However, i think we need to get the powershell command right.
My main issues is, i can't anyone else got the command recorded anywhere else.

the closest i read is this, and it says it is not supported without ADFS and AADconnect
http://stackoverflow.com/questions/39444365/how-to-make-google-apps-idp-for-office-365

IF this is the case I will recommend to swap and use Office 365 password to login to gmail.
this is natively supported.
0
 
LVL 36

Expert Comment

by:Jian An Lim
ID: 41865732
the vendor (microsoft) do not support to use google as IDP without going to onpremises deployment.
0

Featured Post

The curse of the end user strikes again      

You’ve updated all your end user’s email signatures. Hooray! But guess what? They’re playing around with the HTML, adding stupid taglines and ruining the imagery. Find out how you can save your signatures from end users today.

Join & Write a Comment

Synchronize a new Active Directory domain with an existing Office 365 tenant
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
In this Experts Exchange video Micro Tutorial, I'm going to show how small business owners who use Google Apps can save money by setting up what is called a catch-all email address in their Gmail accounts. By using the catch-all feature, small busin…
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now