Chromebooks + Google Authentication

[JeffVCS]

So I have a ton of Chromebooks at the school and we'd love to be able to have them tie the filter & traffic data to a specific user the way that Windows based PC does.

Can Google Authentication do that?

With a Windows PC that user session is matched with their login either by the script or the directory connector, which is great, it makes for a single login.

In the past the suggestion has been to use Captive Portal, but that adds a second username and password after the initial U/P used to access the Chromebook. Since they're already using a school issued Google Account to achieve the login on the Chromebook, is the Windows environment tracking now available in the Google environment?

[jcoffin]

Yes, using Captive Portal with Google Oauth. I would use v13.1 for Google Oauth since it uses the newest Google API.

[dmorris]

Yes, and if they're already logged into the their google account on the chromebook the login is automatic with captive portal.
(It still takes you to the login page, it just happens automatically because you are already authenticated with google)

[JeffVCS]

Yeeeeeeeessssssss!!!

So happy about this.

I've been so busy with other projects I didn't discover that Google Authentication was even a thing until today.

I'm guessing it's been there for months and I didn't even notice.

[f1assistance]

Huh, the high-cost of low-cost and a wanted complexity with simplicity. Ironic, everyone wants their cake and to eat it too...
The old adage; "If it seems too good to be true, it probably is" comes directly to mind.
While I realize this comment isn't one iota of helpful, I regularly have discussions with clients who have similar epiphanies.
My answer is: NOPE! or NOT YET YOU CAN'T!
D'oh! If technology worked as advertised, none of us would have a JOB.

[JeffVCS]

Excellent! I'll wait until my UT box updates to 13.1

Is the documentation referred to on the Google Authentication Page available somewhere?

"This allows your server to connect to Google in order to identify users for use by Captive Portal.
WARNING: Google Authentication is experimental and uses an unofficial API. Read the documentation for details."


I looked over the Directory Connector and Captive Portal pages, but didn't see anything too terribly interesting.

[dmorris]

you can see it at demo.untangle.com in captive portal

don't use it in 13.0 - that is an experimental version that does not work effectively nor support automatic login. That implementation was removed entirely in 13.1

[jcoffin]

v13.1 is not experimental as it now uses the official API.

[JeffVCS]

Super! I guess I just need to be patient and wait for the update to become available on my install.

[jcoffin]

Or get on the priority list by emailing support your UID.