Google Workspace ?

[netean]

All the documentation currently addresses Entra ID so I presume this is the only one supported at this time. We are looking to move away from Ubuntu towards Windows and Mac devices purely as they support Google Workspace login are there any plans for this so that I don't have to force that device change on everyone in the company.

[netean]

currently we use mostly Ubuntu but also a handful of Kubuntu (obviously for the superior desktop experience ;P )

[3v1n0]

The problem of Kubuntu, or KDE, is that the login manager has a very little PAM support, so that wouldn't work fully (it can be implemented at that level though, by implementing PAM conversations).

As display manager you still should use GDM though, to have a better integration (as, again, the KDE login manager misses proper PAM support).

[adombeck]

Yes, support for login via Google is already implemented and is scheduled to be officially released next week. You can already try it out, the snap is https://snapcraft.io/authd-google and a preview of the documentation can be viewed at https://github.com/ubuntu/authd/blob/399637b99ace4f152a1228d418a30fc15fd5f995/docs/howto/configure-authd.md#google-iam.

[netean]

Fantastic!

[netean]

Testing this, it only seems to authenticate with google at initial set up, thereafter it authenticates against local password?
We notice that suspending the Google Account does not prevent desktop login - that can't be the intended behaviour can it?
Is there anyway to force Google Authentication at each login?