Intune with G suite

Question

Hi all,&nbsp;&nbsp;I have a Gsuite house that wants to use Intune as their MDM solution for mobiles. what would be the process here, would i stand up a new Intune tenancy and simply invite them as users in Azure AD/ Intune so they still use their existing G suite creds and license accordingly or do I need to run the Gsuite MS connector for SSO?&nbsp;thanks all

moe_kinani · Answer

Hi Dman74&nbsp; and Oktay Sari&nbsp;I have couple questions for you?1. Do you use Active Directory for On Prem authentication?2. is your GSuite upn email address username @domain.com?I'm gonna try to be detailed in my answer but pretty sure I will be missing few points, so please feel free to ask if you need clarification.How do you start from Scratch?1. Create your custom domain with O365, mx record is staying with GSuite.Link below should help:https://practical365.com/configure-a-custom-domain-in-office-365/2. If you use AD for On Prem authentication, the easier way is to sync the users from local AD to Azure AD using ADConnect, make sure the user synced to the cloud with your custom domain as primary upn username @domain.com.Once done, users will be able to use their Local AD creds to access Azure AD apps. I would sync test OU and test user to start with, then expand for more OUs and users.3. Assign proper licensing, which I think A3 or A5 if you're working school district in US.4. You're in good position now, your users are properly licensed, you need to setup CName validation in Endpoint Manager for easier Windows Enrollment.https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll5. You're MEM (Intune) is ready for MDM enrollment for Windows, IOS, Android and mac.6. Do we need setup for SSO? Not really, but to make things pretty and organized for upcoming students, so they will be automatically signed-in to Google Cloud / G Suite Connector by Microsoft with their Azure AD accounts.Hope this helps, happy to answer any questions during the setup, good luck!Moe

oktay sari · Answer

Thx for jumping in&nbsp;Moe_Kinani! I'm sure&nbsp;Dman74&nbsp;can appreciate any help&nbsp;&nbsp;Regards,Oktay&nbsp;

dman74735 · Answer

thanks all,still waiting for the complete picture on the org but my understanding at the moment is that they dont have any o365 identities. they use G suite for everything. So i guess this answers my point. at the very least to use Intune as a standalone product they will need an account in AD.

oktay sari · Answer

Dman74&nbsp;I'm not aware of a migration path from G suite to Intune. Are the devices being managed by Google Workspace MDM? If so, the only route I know off is unenrollment/wipe from Google Workspace MDM and enroll with Intune.&nbsp;However, you will need to have licensed users in Azure AD. Depending on the features you need, the license requirements may be different.&nbsp; See this doc for more info on licenses.&nbsp;Also have a look at&nbsp;Azure AD SSO integration with Google&nbsp;if you didn't already.&nbsp;

dman74 · Answer

thank you @oktay, the users are currently unmanaged so no MDM in place at all hence the reason for using Intune. I guess its more around the identity piece, if they dont exist in Azure AD and only use G suite how would that work. It is just a case of using the Azure AD SSO integration as you rightly posted and happy days... they use there normal g suite creds but appear as members in Intune not guests?

Forum Discussion

Intune with G suite

Share

Resources