This article aims to provide extra guidance when using Google verification with Connect for Chromebooks.
Connect for Chromebooks is a Chrome™ extension custom utility that can be deployed to all Chromebooks on your network. Once the user is logged into the Chromebook, Connect for Chromebooks handles any subsequent authentication requests.
The Chromebook authentication feature allows internal users to authenticate themselves using their Google credentials, whilst enforcing organizational web filtering policies wherever they are located.
You can setup the Connect for Chromebooks extension to verify the user-supplied credentials with Google's OpenAuth (OAuth) servers. This involves:
- Creating a Google web application, which includes a client ID and client secret expected when communicating with Google's OAuth servers
- Configuring the Smoothwall to Connect for Chromebooks communication
- Distributing the HTTPS certificate from the Smoothwall to all Chromebooks
- Deploying the Connect for Chromebooks extension to all Chromebooks
- Creating filtering and access policies on your Smoothwall
- Granting permission for Google to view users' email addresses
An alternative method, which removes the user credential check with Google's OAuth servers (effectively trusting that the credentials are correct), see our knowledge base article, Setting up Google as a Directory with Connect for Chromebooks.
- From the Google API console, create a Google web application, and make a note of the returned Client ID and Client Secret, see our knowledge base article, Creating the Client ID and Client Secret from for Google Authentication.
- From the Smoothwall administration user interface, go to Services > Authentication > Google, and configure Connect for Chromebooks for Google verification go to the Using Connect for Chromebooks help page, and complete the following sections:
- In the Smoothwall Filter and Firewall, create filtering and access policies, see our knowledge base article, Allowing Access to Google Services.
- In the Google Admin console:
- Distribute the HTTPS certificate you downloaded to all Chromebooks, see our knowledge base article,Distributing the HTTPS certificate to all Chromebooks.
- Add the proxy details for the Smoothwall Filter and Firewall appliance that filters Chromebook web traffic, see our knowledge base article, Filtering Chromebooks by Configuring the Proxy Server.
- Add the client login page as a startup page for all Chromebooks, see the knowledge base article, Granting Google Verification with the Client Login Page.
- Deploy the Connect for Chromebooks extension to all Chromebooks, see our knowledge base article, Installing the Connect Filter Extension on Chromebooks Using G Suite.
- If your Chromebooks are taken and used off-site, you can still apply the same filtering policies applied to users that are on your network, such as, blocking all gaming and gambling websites to all students. For a detailed description of how to do this, see our knowledge base article, Filtering Chromebooks Outside of the Network.
- Log into a Chromebook using valid user credentials.
You may find your users see a block page instead of the startup page. This is because Google prioritizes user authentication over the launching of third party apps, and therefore the Connect for Chromebooks extension does not know the user is authenticated and blocks access. In this scenario, the Connect for Chromebooks icon is gray but only for a matter of seconds before everything is started normally.
- Grant Google permission to view the user's email address, see our knowledge base article, Granting Google Verification with the Client Login Page.
- Open a Chrome browser. You should see the Connect for Chromebooks icon in the browser's icon tray in the top right.
- If the icon is a green shield, the extension is connected and functioning.
- Go to a web site that is allowed for that particular user. This should be successful.
- Now, try going to a website that is blocked for that users. You should see the block page now.
If the shield is red, Connect for Chromebooks is in an error state see our knowledge base article, Troubleshooting Connect for Chromebooks.
Tip: To stop users from bypassing the web filter when using their Chromebooks, you should enroll all devices. We also recommend blocking apps and extensions that are not licensed by your organization, see our knowledge base article, Installing the Connect Filter Extension on Chromebooks Using G Suite.