New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 597872 link

Starred by 1 user
Status: WontFix
Owner:
afakhry@chromium.org
Closed: Apr 2016
Cc:
xiy...@chromium.org
haon@google.com
nickk@google.com
█ nicholaszhao@google.com
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug



Sign in to add a comment

Chrome OS doesn't support Google accounts that use federated login?

Project Member Reported by dmazz...@chromium.org, Mar 25 2016 
I just met a user who has a Google account but is unable to sign into a Chromebook with that account.

When he goes to Google.com he signs in with: bjduarte@asu.edu - you can try it yourself, it redirects to a separate site (https://weblogin.asu.edu/cas/login) to complete the sign in process.

He's unable to use the same account to sign into a Chromebook, it just gives an error.

Is there a plan to support this eventually, and is there a suggested workaround in the meantime?


To reproduce, try to sign in with the username: bjduarte@asu.edu

Comment 1 by omrilio@chromium.org, Apr 21 2016

Cc: zelidrag@chromium.org
Owner: afakhry@chromium.org
Status: Assigned (was: Untriaged)
Ahmed, could you have a look?
When I try to sign in to this account using an incognito window, I do get the SAML page. However, when I try signing in using Chrome I get a password field, which won't ever be accepted by GAIA.

Comment 2 by omrilio@chromium.org, Apr 21 2016

Cc: -zelidrag@chromium.org

Comment 3 by afakhry@chromium.org, Apr 22 2016

Cc: xiy...@chromium.org nickk@google.com haon@google.com
Could it be that the IdP is not configuring SAML correctly?

Comment 4 by nickk@google.com, Apr 22 2016

Cc: nicholaszhao@google.com
For ChromeOS, I believe the domain must explicitly indicate which users are allowed to use SAML to sign in. I'm not sure what the behavior is if the domain admin leaves values at their default.

Comment 5 by afakhry@chromium.org, Apr 25 2016

Status: WontFix (was: Assigned)
Since the SAML IdP redirection will default to false if the domain admin doesn't configure it, then there's nothing we can do from our side.
►

Sign in to add a comment