[Freeipa-users] Free IPA and Google Apps

[Chris Whittle]

Thanks Martin, I found a few notes on FreeIPA and GADS but most were people
saying not to do it on principal but nothing saying if it's possible or not.

I like the SAML option, including the mysterious ipsilon (Is there anything
more than the git repo yet?), but wonder how much control it has.
Does it just allow them to SSO using their LDAP credentials?
If I disable a user in LDAP does it only recognize that only during login
or is it smart enough to kill their Google Apps sessions and make them
login again?


On Fri, Apr 25, 2014 at 3:03 AM, Martin Kosek <mkosek at redhat.com> wrote:

> On 04/25/2014 01:59 AM, Chris Whittle wrote:
> > I am wanting to use Free IPA as the authentication source for Google
> Apps.  I
> > can't seem to find any documentation on how to accomplish this.  Anyone
> have any
> > experience they would be willing to share?  Or install is on CentOS 6.5
> fyi.
>
> I did a brief googling and it seems to me that Google Apps should be
> capable of
> LDAP based auth/synchronization:
>
> http://www.google.com/support/enterprise/static/gapps/docs/admin/en/gads/admin/config_ldap_auth.html
>
> Even better solution would be probably to use SAML:
> https://developers.google.com/google-apps/sso/saml_reference_implementation
> by utilizing a project Ipsilon that Simo (CCed) is working on.
>
> Martin
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140425/c516e8f1/attachment.htm>