Google Apps (Enterprise)

Google Apps for Education

After provisioning users into the system (for example, through Imports), you may integrate with Google Apps for Education to authenticate users into Schoology using their Google Apps login credentials. This feature enables you to authenticate users using their Google username or email address.

It also requires one of the following:

  • The Username field to match users' prefix of their email.
  • The Unique ID field in Schoology to match the corresponding Google Drive credentials.
  • The Email field to match users' Google Apps for Education email addresses.

Google SSO by Username or Email Address

To set up Google SSO by Username, the prefix of the email must match the Username field in Schoology. If you're provisioning users from your SIS, the Unique ID will most likely be populated by your SIS.

To set up Google SSO by Email, the email address must match the users' Google Apps for Education email address.

To complete setting up external account management:

  1. Click System Settings in the left menu of your Home page in Schoology.
  2. Select Integration and click the Authentication tab.
  3. Click Cloud/On Premise Directory.
  4. Select Google Apps.
  5. Set the Return URL to a location to which you would like your users to be redirected once they log out of Schoology.

    Note: Set your Return URL  to https://mail.google.com/mail/logout?hl=en to ensure users are logged out of Google when they log out of Schoology. This is especially suggested for schools that use shared computers.

  6. Under Domain, set the URL to your school's homepage or to the path on which Google Apps is based.  For example, if mail.google.com/a/schoolname.com is your Google login URL, schoolname.com would be the domain.
  7. Enter the Administrator Email Address and Password.

    Note: As long as the Return URL, Allowed Domains and Match Google By fields have been populated in this screen, the Google Permissions and Admin Levels will not affect your Schoology Google SSO integration. 

  8. Match Google using Username, Unique ID, or Email, according to your preference of user authentication into Schoology.
  9. Click Save Changes to complete.

  

Change Your Landing Page

Once you've successfully established the link to your Google instance, click Save Changes and click on the Custom Domain tab.

Here you should see that your Domain Type has been set and and your Domain Alias has changed to your school's custom subdomain. These are configured by working with your Schoology Implementation or Project Manager during your school's implementation process. If these fields are not configured in the Custom Domain tab, contact Schoology Support. 

Change the Landing Page dropdown from Schoology Log In to External Account Provider and click Save Changes. Changing the landing page is the important final step in enabling your Google SSO configuration. Once you click Save Changes, your users will be able to log in to Schoology using your custom domain and Google credentials.  

Note: To prevent students and teachers from logging in outside of your Custom Domain or Subdomain, System Administrators can enable a permission to Ensure user logs in using external authentication provider.

This permission will only appear if you have already configured Google SSO for your organization. If you do not see this permission once Google SSO has been configured, please contact your Client Success Manager.

Install Google Drive for Your Entire School

As the System Administrator of your school or organization, you can pre-install the Google Drive Resource App to all users, or to certain roles in your school.

  1. Click the App Center in the left menu of your Home page.
  2. Find the Google Drive app.
  3. Click Install Resource App.
  4. To add the app to your school or organization, click Add to Organization.
    install_resource_app.jpg
  5. From the Organization Apps area of the App Center, click Configure next to the Google Drive app.
    org_apps.jpg
  6. From here, you will find directions to configure the app.

    In Google Apps domains, the domain administrator can grant to third party applications domain-wide access to its users' data — this is referred as domain-wide delegation of authority. The following tasks have to be performed by an administrator of the Google Apps domain:
        1. Go to your Google Apps Admin console. The URL should look like this: https://admin.google.com/AdminHome.
        2. Go to Security controls > Advanced Settings.
        3. Under Authentication select "Manage third party OAuth Client access".
        4. In the Client name field enter:
          1025105093939-0u2uagbasf99r1cms0lgrbeskqvmf2up.apps.googleusercontent.com.
        5. In the One or More API Scopes field enter: https://www.googleapis.com/auth/userinfo.email,https://www.googleapis.com/auth/drive.
        6. Click the Authorize button.

  7. Once you've authorized your Google Apps for Education account, you can check the box to Enable Domain-Wide Access.
    Note: Users must have a primary email set up within Account Settings. These emails must match between Schoology and Google.
  8. Click Save Settings to complete.
  9. Once the app is configured, click the breadcrumb at the top of the page to go back to the Organization Apps area.
  10. Click Install/Remove next to the Google Drive app.
  11. Check the box to install the app for All Users. If you'd like to limit the app to certain roles, remove the check mark for the roles you would not like to access Google Apps in their Resources.
    Google_Drive_App_2a.png
  12. Click Submit to complete.
Powered by Zendesk