Configuring the Google and Chromebook settings, and downloading the HTTPS certificate
Note: The Smoothwall Filter and Firewall hardware appliance must be configured with a fully qualified hostname, for example, my.smoothwall.com, see the help topic, Changing the system's host name and how it identifies itself to the network. Make sure that the DNS server used by the Chromebooks maps the Smoothwall Filter’s fully qualified hostname to the Smoothwall Filter internal IP address used by the Chromebooks to connect to.
- Make sure you map your directory groups, see our help topic, Mapping Google directory groups to local Smoothwall Filter and Firewall groups.
- Make sure that the time set on your Smoothwall Filter and Firewall matches the Google G Suite domain time because this causes the username synchronization to fail.
- On the SERVICES menu, under the Authentication submenu, click Google.
- Under the Google settings section:
- If you want to turn on Google Sign-In on the SSL login page, select the Google Sign-In button option.
- If you want only accept logins from specific domains, select the Approved domains option and type the list of domains that you want to include.
- If your directory service doesn't need the domain name to form part of the username to log in, select the Remove domain name option.
Note: If you're using the Google directory service for user group mappings, don't select this option because the full email address is needed for the username.
- To use the Google authentication service to confirm the identity of the user, select Validate user identity. We recommend that if you have Chromebook devices that you clear this option but if you use non-Chromebook devices that you select this option. This is because with this option selected Chromebook users would need to log in twice.
- Type in the Client ID and Client Secret. See our knowledge base, Creating the Client ID and Client Secret from for Google Authentication .
- Under the Chromebook settings section:
- To allow users to log in using connect for Chromebooks, select the Connect for Chromebooks option.
- To download the HTTPS Certificate so that you can upload it to your Google account, click Download certificate.
- Click Save changes.
- The client login page is accessed from the following URL: https://<hostname>:442/modules/auth/cgi-bin/google/login.fcgi
- where hostname is the fully qualified host name of the Smoothwall. For example: https://my.smoothwall.com:442/modules/auth/cgi-bin/google/login.fcgi
- From the Google Admin Console, set this URL in the Pages to Load on startup parameter. See our knowledge base article, How do I use the Connect for Chromebooks Client Login Page as a Chromebook startup Page?.