Experiences Google Apps for Work Connector

[audiolinux]

Hi

has anyone here experiences with the Google Apps for Work Connector with gmail, google Docs and so on?
Can a user login to googles services, if the UCS-SSO server is not available; lets say from outside the companies network?

Cheers

[troeder]

Access to the UCS-SSO server is required: When SSO is configured for Google Apps, the login at Google will redirect your users to the UCS SSO login page.

Your UCS-Server should be protected by some kind of application firewall or HTTP reverse proxy, exposing only those pages to the internet, that you want accessible.

Greetings
Daniel

[sccmrb]

My experience is that it is majorly flawed. Even though I had specified a different domain (yes it is a part of our Google configuration) for my students when importing them via the command line it still created email accounts for them under the domain the staff is using which is the master domain for our campus.

Also when you delete a user in UCS it deletes them in Google. The Google Apps Directory Sync application from Google has an option to suspend the Google user if they are no longer in LDAP. This preserves their data if they return or if it is needed else where like on a Google Site or Shared Documents.

[troeder]

My experience is that it is majorly flawed. Even though I had specified a different domain (yes it is a part of our Google configuration) for my students when importing them via the command line it still created email accounts for them under the domain the staff is using which is the master domain for our campus.

The current implementation allows the use of only one domain (the one used with the wizard).
I have created a feature request to allow all registered domains: https://forge.univention.org/bugzilla/show_bug.cgi?id=45346

Also when you delete a user in UCS it deletes them in Google. The Google Apps Directory Sync application from Google has an option to suspend the Google user if they are no longer in LDAP. This preserves their data if they return or if it is needed else where like on a Google Site or Shared Documents.

I have created a feature request to add an option to only disable user accounts, when the ucs account is deleted: https://forge.univention.org/bugzilla/show_bug.cgi?id=45347

[sccmrb]

@troeder

What are the changes to version 2.2 of this app? I cannot seem to find any information about what the new features are or usage examples like disabling a user but not erasing their Google account.

Thanks

[troeder]

Unfortunately the app changelog can only be seen during update. I hope this is changed in the future… Here is the changelog for 2.2: http://appcenter.software-univention.de/univention-repository/4.3/maintained/component/google-apps_20180322143354/README_UPDATE_EN

The app didn’t receive any new features. It was just adapted to changes in the Google programming libraries and has code to support updates from UCS 4.2 to UCS 4.3.

To add proper user deactivation to the app has been scheduled for the next few months. Unfortunately I cannot tell you an exact date yet, but it will happen.

Greetings
Daniel

[sccmrb]

Thanks @troeder but that’s what you guys said about a year ago in terms of adding the deactivation feature. Is Google just not an important thing for you guys? Because the rest of the planet disagrees. Until this feature happens this connector is useless to me. I think you at least added support for multiple domains correct?

[troeder]

I know how frustrating it is to wait for others to fix/develop a required feature.
I’m sorry Univention hasn’t given this the priority it deserves. I sincerely hope this will be fixed soon.

Greetings
Daniel

[volkswagner]

This thread is very old, but I can’t locate any success stories. Is this connector working in 2024 with UCS 5.x?
It seems to still have unresolved bugs (or incomplete instructions/wizard).

Several open threads:

UCS 5.XX and Google Workspace

Hi, will it be possible to use UCS 5.XX with Google Workspace? I don’t find anything on the subject. Thanks José

Google Workspace unexpected behavior

Does anyone have this connector working with Google Workspace? What other troubleshooting steps can I perform?

Syncing UCS User Passwords with Google Workspace

Hi There, I’m working on integrating our google workspace with our UCS directory (SambaAD Side) using Google’s GCDS application. I’m syncing users, profiles, and groups just fine. However, I am struggling with figuring out how to properly get passwords for users and pass them on to google work space. I have done a fair share of google searching and see where a few people might be trying the same: How are others doing this? It seems that UCS 5.x does not have the “G Suite Connector” app that…

Problem: Troubleshooting Group Synchronization to Google Workspace

These troubleshooting steps aim to address synchronization issues of groups with google-apps-for-work. If you encounter synchronization issues with groups containing users with a Google Workspace account, follow these steps. Important: All groups with a member that is synced to Google will be synced and as of yet you cannot exclude groups to be synced! Identify Affected Groups: Verify if the groups being synchronized are indeed affected or if there are groups without relevant users. Relev…

Session Time Out with Google Apps for Work

Is there any option to timeout the login session from Univention to Google Apps for work? The problem is once the user login with Google Apps for work his session is not expired even after changing the password of the user. This follows with Gmail web & mobile app both

Multiple Domains/g suite accounts

Did the gapps-connector support multiple domains or multiple g suite accounts?

Users need to create scripts to avoid conflicts with existing accounts, seems like it should be built-in by now.

Google Connector - existing Google user accounts

Admin users are treated differently in a few other aspects as well. They will for example not be redirected to a change password URL, while normal users are sent there, when they should change their password etc…