Experiences Google Apps for Work Connector

appcenter

#1

Hi

has anyone here experiences with the Google Apps for Work Connector with gmail, google Docs and so on?
Can a user login to googles services, if the UCS-SSO server is not available; lets say from outside the companies network?

Cheers


#2

Access to the UCS-SSO server is required: When SSO is configured for Google Apps, the login at Google will redirect your users to the UCS SSO login page.

Your UCS-Server should be protected by some kind of application firewall or HTTP reverse proxy, exposing only those pages to the internet, that you want accessible.

Greetings
Daniel


#3

My experience is that it is majorly flawed. Even though I had specified a different domain (yes it is a part of our Google configuration) for my students when importing them via the command line it still created email accounts for them under the domain the staff is using which is the master domain for our campus.

Also when you delete a user in UCS it deletes them in Google. The Google Apps Directory Sync application from Google has an option to suspend the Google user if they are no longer in LDAP. This preserves their data if they return or if it is needed else where like on a Google Site or Shared Documents.


#4

The current implementation allows the use of only one domain (the one used with the wizard).
I have created a feature request to allow all registered domains: https://forge.univention.org/bugzilla/show_bug.cgi?id=45346

I have created a feature request to add an option to only disable user accounts, when the ucs account is deleted: https://forge.univention.org/bugzilla/show_bug.cgi?id=45347


#5

@troeder

What are the changes to version 2.2 of this app? I cannot seem to find any information about what the new features are or usage examples like disabling a user but not erasing their Google account.

Thanks


#6

Unfortunately the app changelog can only be seen during update. I hope this is changed in the future… Here is the changelog for 2.2: http://appcenter.software-univention.de/univention-repository/4.3/maintained/component/google-apps_20180322143354/README_UPDATE_EN

The app didn’t receive any new features. It was just adapted to changes in the Google programming libraries and has code to support updates from UCS 4.2 to UCS 4.3.

To add proper user deactivation to the app has been scheduled for the next few months. Unfortunately I cannot tell you an exact date yet, but it will happen.

Greetings
Daniel


#7

Thanks @troeder but that’s what you guys said about a year ago in terms of adding the deactivation feature. Is Google just not an important thing for you guys? Because the rest of the planet disagrees. Until this feature happens this connector is useless to me. I think you at least added support for multiple domains correct?


#8

I know how frustrating it is to wait for others to fix/develop a required feature.
I’m sorry Univention hasn’t given this the priority it deserves. I sincerely hope this will be fixed soon.

Greetings
Daniel