Main Nav

Williams College is in the planning stages for migration to Google Apps for Education.  We are interested in learning whether other schools synchronize their campus passwords with Google Apps.  Also we would be interested in your reasoning for either doing it or not doing it.  Any information would be greatly appreciated.

Thanks in advance,

Maggie Koperniak

____________________________________________________
Maggie Koperniak
Project Mgr, Administrative Systems
Williams College, Office for Information Technology
Margaret.M.Koperniak@williams.edu
(413) 597-2336 FAX: (413) 597-4103

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Comments

We use an internally built tool that uses Google AP{I for password change; we have an Ellucian web portal and it just made sense to have the passwords for the web portal and Google Apps synch for simplicity.
Ken
Ken Yoshioka Graphic Media and Training Specialist SOE 005 Center for Instruction and Technology Information Technology Services University of San Francisco 415-422-5670 yoshioka@usfca.edu
Message from william.eubank@uah.edu

We also use homegrown tool that uses Google api.  Wasn't very difficult to implement.

-W



Hi Maggie,

We use GAPS and GADS with our Google Apps environment and Active Directory.  We sync over 50,000 accounts and passwords, with very few problems.  

Good Luck!

John



We are in the implementation phase, and hope to have our system working in the next couple weeks.  We are syncing our SIS with Active Directory, which then syncs to Google with GADS.  pwm (a password reset/account claiming tool) will sit on top of AD—sounds similar to John’s set up.   Syncing camps passwords is not critical for us, but something we are working towards, we feel this set up will move us closer to SSO (single sign on).

FYI, we have limited budget, since we already had AD in place, this has been a cost effective solution.

-Nathan Phillips
Prj. Lead for Marylhurst’s Google Apps Deployment




Our previous email system stored all the account information in an LDAP server, so we kept the LDAP data when we transitioned to Google and use the Google Apps Directory Sync tool to synchronize our automatically created local LDAP accounts to Google Apps. Because we are using single sign-on for web logins, password changes are disabled inside Google Apps, so the IMAP/mobile password must be modified using our local password management tools. We push password changes back to Google through the Google API with a locally written script so they take effect immediately instead of at the next hourly sync. We also use the API for renames and some other minor provisioning tasks.

-jbp

--
Jay Parker | Associate Director - Systems
University of Arkansas at Little Rock | Information Technology Services
+1-501-916-3010 | jbparker@ualr.edu | http://ualr.edu/itservices


Colby College does the following to manage user accounts in Google Apps:

Passwords: we use a custom page to set the Colby Active Directory and Google Apps for Education (GAE) password at the same time.  When we switched to GAE, we had a number of users on IMAP (and still do) and using SSO would have made this very difficult. Have the same password in both locations was a win.

User Accounts: we use Google Apps Directory Sync (GADS) to auto-create accounts in GAE. GADS looks to see if there's an email with a user, and if so, creates an account automatically. We use Exceptions to handle a few accounts that don't follow the standard.

Batch and Other Operations: we don't delete faculty/staff accounts, but have been clearing graduated student accounts yearly. We use Google Apps Manager (GAM) to do batch deletion of accounts and some group creation.

Rurik


We also have been syncing our AD passwords with Google Apps Password Sync (GAPS) since migrating to Google Apps over a year ago.  The sync is pretty much instantaneous wether we we change the password with AD tools or the end user initiates the change.  We utilize the FIM passord reset portal as the default "change password screen" from the Google Apps interface which forces all passwords changes via the Google screens to occur in AD and then syncs back to Google Apps.

 

Angelo D. Santabarbara
Director of Networks & Systems
Siena College

Message from rlspence@colby.edu

Colby College does the following to manage user accounts in Google Apps:

Passwords: we use a custom page to set the Colby Active Directory and Google Apps for Education (GAE) password at the same time.  When we switched to GAE, we had a number of users on IMAP (and still do) and using SSO would have made this very difficult. Have the same password in both locations was a win.

User Accounts: we use Google Apps Directory Sync (GADS) to auto-create accounts in GAE. GADS looks to see if there's an email with a user, and if so, creates an account automatically. We use Exceptions to handle a few accounts that don't follow the standard.

Batch and Other Operations: we don't delete faculty/staff accounts, but have been clearing graduated student accounts yearly. We use Google Apps Manager (GAM) to do batch deletion of accounts and some group creation.

Rurik


At Hamilton College, we are currently not synchronizing passwords between Google and AD, but the password change form that most people use changes it in both places. Users who desire independent passwords can change them directly in either system.

However, we are close to implementing a password management system that will replace the existing change form. Once in place, we will block native AD password changes and redirect the Google password change form to the new system, so at that point passwords will effectively be synchronized. For users that desire independent passwords, we are also going to be enabling two-step verification.

At the time we migrated, we had the change form in place which worked against our other email system and adding support for Google accounts was easy. We also have a fair number of "email-only" accounts, so we didn't pursue more sophisticated sync tools.


--
Jesse Thomas
Network & Systems Administrator
Hamilton College


Thank you to all who responded. It was all helpful information.

 

Maggie

 

Close
Close


Annual Conference
September 29–October 2
Register Now!

Events for all Levels and Interests

Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.

Close

Digital Badges
Member recognition effort
Earn yours >

Career Center


Leadership and Management Programs

EDUCAUSE Institute
Project Management

 

 

Jump Start Your Career Growth

Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.

 

Close
EDUCAUSE organizes its efforts around three IT Focus Areas

 

 

Join These Programs If Your Focus Is

Close

Get on the Higher Ed IT Map

Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
 

 

Close

2014 Strategic Priorities

  • Building the Profession
  • IT as a Game Changer
  • Foundations


Learn More >

Uncommon Thinking for the Common Good™

EDUCAUSE is the foremost community of higher education IT leaders and professionals.