Google Apps Technical Transition Guide For Business, Education, and Government - Manual (Page 53)

53
Chapter 10
Authentication and Authorization
Chapter 10
Core IT
Decide whether to add auth services
Level of Effort: Moderate
Google Apps supports authentication and authorization (auth) for your third-party
services via OpenID and OAuth. These protocols also enable your users to allow
limited access to their data for certain purposes. You can configure your internal
services to make use of these protocols with the APIs Google provides.
• Read Authentication and Authorization for Google APIs to learn more about
using OpenID and OAuth in your domain.
Google Apps also supports SAML-based single sign-on (SSO), which you can
integrate with your existing LDAP or other SSO system. Single sign-on greatly
simplifies the login process for your users, who otherwise need to remember a
different set of credentials for each of your internal services.
• Read SSO (Single Sign-On) to learn more about single sign-on.
You should decide by the end of the Core IT phase exactly which—if any—of these
authentication and authorization services you want to implement in your system.
Deciding to add one or more of these services later on will result in significant
additional work.
Decide whether to enable 2-step verification
Level of Effort: Low