Has anyone tested the G-Suite connector before implementing BBID?

Google G Suite Configuration has 4 steps to follow to implement BBID for schools using Google as their ID provider. I would like to know if I can back out of the “Configure G Suite Connection” form. After step 10 there is a lovely message: After you save this connection, Blackbaud IDs on your primary email domain won't be able to sign in through Google until you complete the configuration. Not knowing what will happen next is concerning and also frustrating that we may not be able to test this out without bringing the house down.

Comments

  • Bryna Gleich
    Bryna Gleich Blackbaud Employee
    Tenth Anniversary Kudos 3 Name Dropper Participant

    Can you send me the URL of where you're reading that? I want to review it and confirm it's the current documentation.

    When I view

    and look at Step 4: Turn on G Suite there isn't a step 10 after that. And for Step 1: Configure the Google application the substep for 10 has a different note that says:

    Tip: To view the client ID and secret for your project in the Google API Console, select Credentials, Credentials, and select the project's name under OAuth 2.0 client IDs.

  • I am unable to provide a link but I can show you a screen capture. (See below) See the warning highlighted in yellow.

    7e9258a167eface1a1b332cbbfab436b-huge-co
  • Bryna Gleich
    Bryna Gleich Blackbaud Employee
    Tenth Anniversary Kudos 3 Name Dropper Participant

    Thanks for the screenshot. I was checking the help files. It looks like that screenshot is directly from the UI.

    My understanding is the the “error” that prevents users from logging in only occurs between that step and the next couple steps where you finish configuring it, adding emails, testing it, and turning it on.

    As soon as it's turned on (step 4), users can log in.

    Therefore, the best time to do this process is during a “maintenance window” for your school network, when users are informed that a change will be underway.

    If you have at least one BBID account that is not on your claimed domain, but can access Authentication for your Google API Console, that also helps prevent an inadvertent lockout while the setup is underway.

Categories