Jesse Thorstad
Technology Specialist
Fergus Falls (MN) Public Schools
http://www.isd544.org
218-998-0544 x2036
--
You received this message because you are subscribed to the Google
Groups "Google Apps K12 Technical Forum" group.
To post to this group, send email to k12ap...@googlegroups.com
To unsubscribe from this group, send email to
k12appstech...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/k12appstech?hl=en?hl=en
We have 6500+ students and roughly 900 faculty and staff.
Importing via CSV or GAM is not an option for us.
We have up to 50 student adds, moves, and withdrawals daily.
Each summer, we remove all students’ accounts, home directories, etc. so our network starts the year out clean.
We use GADS to import and maintain our users, OU’s and groups.
I have written custom programs to import the schedules into AD into an OU, set group specific information into the Active Directory extensionAttributes set specifically for Google Apps that GADS rules can pull from.
We have created groups for each Course, Section, and Course set for collaboration.
We have setup simplesamlphp as our SSO (single sign on) so our users can use their network credentials to log into Google Apps.
We have also set up Google DirSync on our Windows 2008 R2 Domain Controllers so when passwords are changed; the changed passwords are replicated to Google Apps so that our Faculty/Staff and Students can use Google Drive to keep their files synchronized across multiple machines.
Our district also uses SIF heavily.
I have programmed a custom agent that handles in house programs that do not have commercial SIF agents for them.
I have also set up this SIF agent to create Google App accounts for students as soon as they are entered into our Student Information System (SIS).
Just pointing out another option for larger districts to show that the entire process can be automated.
Curtis Starnes
Senior Network Administrator
Granbury ISD
The Gmail, Google Docs (Google Drive) passwords are set by the Google DirSync when the accounts are created via SIF every August.
The only time they need to use the Google stored password is when they use IMAP, POP3, or Google Drive to directly access their accounts via a 3rd party application.
All web based authentication is handled via SimpleSAMLphp SSO; which is a web based portal housed inside our district (running on Ubuntu) and authentication requests are made against our Active Directory.
http://simplesamlphp.org/docs/1.5/simplesamlphp-googleapps
https://developers.google.com/google-apps/sso/saml_reference_implementation
Curtis