Google Apps Education Edition

• All Blackbaud ID usernames must be email addresses. For school issued email addresses, use Blackbaud ID Single Sign-On (SSO) instead of Google Apps SSO to reduce the number of times users are prompted to login.

  • If your school still wants to use Google as your identify provider, you can setup Blackbaud ID to authenticate back to Google for your school domain. You can configure Google as your identity provider by configuring the Blackbaud ID Single Sign On with SAML 2.0. To do so, follow these instructions.

  • When your school enables a Google connection with Blackbaud ID Single Sign-On (SSO) you can choose two additional options for users to login.

  1. Users enter their complete Google email address as they initially login, are redirected through Blackbaud ID, enter their Google password, and then access the Blackbaud Education Management products.

  2. Log in to gmail (Google email), find the registered Google App and access the Blackbaud education management products.

Blackbaud ID SSO requires a few settings that you'll need to review. However, to experiment with how Blackbaud ID works or to set up an account for SKY API, you can still select individual users to authenticate via Blackbaud ID, storing the password at Blackbaud ID, separately from their Google account. To do this, follow the Enable Blackbaud ID for a role and/or specify a domain instructions.

• With the Blackbaud ID SSO implementation, Google becomes the Identity Provider. The Google Admin 3rd party authentication setting is configured for your entire domain to authenticate via the Blackbaud application, so when switching your authentication method to SSO using Google as the IdP, you impact all users on that domain immediately, not just selected users or by role.

• With Blackbaud ID SSO implementation, to provision users at Google you must use an import or some other synchronization tool or process.

• With the Blackbaud ID SSO implementation, Blackbaud Education Management can be registered in the Google App menu. If the user connects to Google first, the user can navigate without any additional login requirements. If the user starts at the Blackbaud education management login page and authenticates with Google, any Google link will also work.

Note: When the SSO has been configured with Google, the Sign in with Google button will no longer apply. Users will see an error message if they select that option instead of using their school email address through the login process. Users will need to use their school email address instead. Remember that the Sign in with Google button is intended for a "social sign in" such as what you would issue to users who don't have a school-issued email addresses (parents and alums).

Create a Gmail link in the Blackbaud school management solution so users can SSO into Gmail.

1. From Core, select Settings, and then Inbox settings.

2. Under Gmail, add a custom label and URL.

   Note: The URL should be your Google Gmail login URL, such as: https://mail.google.com/a/domain.org.

3. Changes will save automatically.

4. A Gmail link will show up in the top navigation.

Publish the Google Apps link to your school's site anywhere behind the password.

1. Select School website.

2. Select Content.

3. Select Additional content types.

4. Select Links.

5. Search for and select the link category.

6. Edit the link to use the SSO URL.

Publish the link to your school's users in a location that is easily accessible, such as the Resource board.

Note: If content is managed outside of Blackbaud's school website solution, go to Core > Content > Additional content types > Links.

• Example Links:

  • Gmail: https://mail.google.com/a/domain.org

  • Calendar: https://www.google.com/calendar/hosted/domain.org

  • Drive: https://drive.google.com/a/domain.org

If you would like your groups to sync into Google Apps and have email groups created:

1. From Core, select Settings > Integration settings > Google Apps Group.

2. Select Edit

   Note: Managers must also enable the integration in Extracurricular > Content > Group Pages > Group Page Options. For each of the appropriate group types, in the Options tile, enable Sets integration options for Google Apps.

Please contact customer support with the following information:

1. The name and username of the user who is experiencing the issue.

   Note: The username must match the username in Google Apps.

2. The name and security of the Google Apps link category.

3. Screenshots of your Google project .

4. Where within the site users are accessing the link.

5. A screen capture of issue, if possible.