captive portal with Google Workstation

leonida368

@Gertjan forgive me I meant Google Workspace (formerly Gsuite)

Gertjan

Let me get this clear : you want to collect the Google account info from some one (login and password to be entered on a captive portal login page) and then have pfSense check up with Google if the account info is valid ?

leonida368

@Gertjan that's right, our client is a school that has a delivery with Google Workspace and all teachers have an account with it. The school director would like access to the Internet via browser to be subject to the inclusion of these credentials in a captive portal

stephenw10

You can setup Google Cloud as an authentication server and then use that.

https://docs.netgate.com/pfsense/en/latest/recipes/auth-google-gsuite.html

leonida368

@stephenw10 ok thanks, in fact, this is exactly the article I intended to study. I just wanted to understand if the captive portal comes out every time after a certain period of inactivity or what the criterion is.
I ask you this, because the school has several devices on which various teachers work alternately and therefore they must be able to access from time to time with their Gogle Workspace account

Gertjan

@leonida368

Ah, ok.
Something like this : Work or school Google Account ?
Which means the account that the potential portal users use has been created by the school.

If so, ask the school's Google administrator ? as you'll be needing him.
Maybe Google has some API that permits you to do this .... and if so, then yeah, why not.

stephenw10

The Captive Portal can be configured to do either.

leonida368

@Gertjan said in captive portal with Google Workstation:

Ah, ok.
Something like this : Work or school Google Account ?
Which means the account that the potential portal users use has been created by the school.

If so, ask the school's Google administrator ? as you'll be needing him.
Maybe Google has some API that permits you to do this .... and if so, then yeah, why not.

yes I have already contacted the admin to do it, in the past I have already done it with Packetfence by creating an LDAP client in the Google Workstation admin console and then configuring the join with it. I just wanted to understand if the captive portal comes out every time after a certain period of inactivity or what the criterion is.

leonida368

@stephenw10 ah ok. Thanks

leonida368

hi @Gertjan thanks for the replies