Connecting Google LDAP to FileWave server

[Adam Richmond]

Greetings,

Has anyone out there successfully added Google's LDAP to their FileWave server? If so, how did you do it?

[Josh Levitsky]

Hi @Adam Richmond I was wondering about the end goal. When I think about this I was wondering if it related to Chromebooks because we do automagically show the structure of your Google account with devices in the right places when you setup Chromebook management. But I was curious if your question didn't relate to that. Is it about other device types. 

[Adam Richmond]

Greetings,

My boss wants to enroll iPads and MacBooks using our district Google accounts. I have the IdP setup. However, the LDAP portion is not connecting.  The Google splash screen pops up, the credentials go through, but then it errors out. 

 

[Adam Richmond]

All of the instructions that I have seen are to connect our Google Admin to an LDAP server. I want to send the data from Google's LDAP to the FileWave server.

[Josh Levitsky]

Ok that makes sense. So setup for that is the same as IdP you just check the Enrollment checkbox and then in the DEP profile you pick the checkbox related to it but it sounds like you did that if the box is coming up but it is giving an error. This might be better for a support ticket https://help.filewave.com or help@filewave.com but maybe if you can share here what it looks like when it errors out?Any error text that may give an idea about it? 

[Adam Richmond]

I do have a ticket in. SUP-82006

Adding a Google LDAP client is pretty simple. Here is a video from Google. How to manage access to LDAP-based apps and infrastructure in G Suite - YouTube

 

Here is what the error is.

 

[Sean]

Sounds like your IDP cert may have expired.  Try logging into your IDP and checking out the IDP Application expiry date.

[Adam Richmond]

The IDP cert was made last week. I would hope that it would last longer than a week.

[Sean]

Hmm, although you can define duration of expiry, but it would seem unlikely it were that short.

[Sean]

In Azure you can define anything with the Custom Setting, but the recommended is the default if you don't alter anything:

[Sean]

Looks like Google may automatically do this:

so in your case, very much unlikely it has expired.

You may need to raise a support ticket, if you are happy that you don't have any Firewall rules that would be getting in the way.

[Adam Richmond]

I guess that we can close this one. 

"Directory data synchronization (and custom fields) between the IDP source and FileWave is not supported at this time but will be added in a future release."

 

 

[Ross Fischer]

I was getting more and more hopeful as I read this thread that a solution was coming.  Then I started to cry when I read Adam's last post.