Enrollment authentication with Google Idp

[mraffa]

Hello everyone 

I’m trying to understand if there’s any chance to authenticate Google users on DEP enrolled Mac devices. 
That would really come in handy in a zero touch deployment, as that would make you able to push down Google account configuration using owner datas. 
I know that oauth isn’t supported on DEP devices (I don’t understand why though), but maybe using LDAP instead?

Was anyone able to accomplish this?

[Inderdeep]

So you are talking about iOS devices on Apples DEP. please check the below document

https://documentation.meraki.com/SM/Device_Enrollment/Enrolling_and_Supervising_iOS_Devices_using_Ap...

[mraffa]

No, I am talking about enrollment authentication for DEP enrolled MacOS devices: https://documentation.meraki.com/SM/Device_Enrollment/SM_Enrollment_Authentication

[Inderdeep]

I am not sure if it works like that but Check this Active directory via SM agent

https://documentation.meraki.com/SM/Device_Enrollment/SM_Enrollment_Authentication#Managed_Authentic...

[mraffa]

That’s the same doc I linked. I know that AD is the only supported authentication method (together with Meraki managed) for DEP enrolled devices, that is clearly stated in the doc.

AD is an LDAP implementation, but it’s kind of its own. That is definitely not what Google provides with its Secure LDAP service (https://support.google.com/a/answer/9048516).

I was just wondering if anyone tried to set up the binding with Google LDAP service.

[PhilipDAth]

https://documentation.meraki.com/SM/Device_Enrollment/SM_Enrollment_Authentication#Sign_in_with_Goog... 

[mraffa]

That is the same article I linked in a previous post.
Google oauth isn’t supported on DEP enrolled Mac devices.