SIMS ID Google On-boarding

Google Onboarding SIMS ID and SIMS Steps

GREENFIELD SITE Google Provisioning

This method of on-boarding is for a site that does not have users in the Google tenancy. If your tenancy has users that you wish to keep please refer to BROWN FIELD SITES Google Provisioning & user matching

Step -2 Create the Google tenancy

YourGoogle processproccess

Step -1 Obtain Username and PW for the site in question

If you do not have a SIMS ID site you can request one from educationsalesadmin@sims.co.ukeducationsalesadmin@sims.co.uk

A SIMS ID site will be created, and an initial admin account will be provided.

Step 1 Setup SIMS ID perquisites

Log in with credentials at https://id.sims.co.uk

Step 2 - Set username formats etc

Please see https://id.sims.co.uk/support/wiki/74/       

Step 3 - Link SIMS to SIMS ID.

https://id.sims.co.uk/support/wiki/73/    IgnorePlease the referencerefer to Microsoft (https://id.sims.co.uk/support/wiki/73/)    

the steps are common

Step 4 - Ask SIMS ID to turn on Google

Provide the following info including the certificate generated for the Google tenancy

Refer to Google Tenancy Steps. for details on creating the accounts and keys (aka certificate)

Step 4 - Accounts will provision to Google

Once the tenancy is configured accounts will now provision to Google

Step 5 - Issue usernames and passwords

Please refer to Regenerating and Distributing Temporary Passwords - updated for dealing with new year groups

OPTIONAL Step - Google Gradesync Pilot

Using Google Grades Write back to SIMS Assessment Manager

• Google are hosting a pilot to transfer data from Google Classroom Gradebook to SIMS Assessment Manager.

• To find out more and to learn to set up this feature please see Google Classroom Gradesync Pilot and the associated Google Grades Teacher Guide

BROWN FIELD SITES Google Provisioning & user matching

The method of on-boarding a site that already has users in the Google tenancy follows this process. If you have a blank tenancy you should refer to GREENFIIELD SITE Google Provisioning

The orange boxes represent steps that can only currently be carried out by SIMS ID staff.

Step -2 Acquire the Google tenancy

Google process lead by customer

Step -1 Obtain Username and PW for the site in question

If you do not have a SIMS ID site you can request one from educationsalesadmin@sims.co.ukeducationsalesadmin@sims.co.uk

A SIMS ID site will be created, and an initial admin account will be provided.

Step -1a Extract users from Google tenancy

Google process lead by customer

Step -1b Import into SIMS using the spring 2020 release feature

This sets the primary email address of each pupil with the Google mail address they have. Please see https://youtu.be/zIe22upVF6g for an overview of this feature.

Staff should also be set but this is manual and is probably done already.

Step 1 Setup SIMS ID perquisites

Log in with credentials at https://id.sims.co.uk

Step 2 Set username formats etc

Please see https://id.sims.co.uk/support/wiki/74/    

Step 3 Link SIMS to SIMS ID

Please see https://id.sims.co.uk/support/wiki/73/    

Step 3a Run the Google onboarding report

Please use SIMS ID Report Viewer for a report called ‘Google Onboarding’ for help on using report viewer please see https://id.sims.co.uk/support/wiki/40

Step 3b Data review

Review this report and add any missing email addresses in the email column and immutable id column

See below for the required report layout and example data.

Step 3c Provide CSV to SIMS ID Team

SIMS ID will import this data, eventually, an upload facility will be provided.

Step 4a Ask SIMS ID to turn on Google

Provide the following info including the certificate generated for the Google tenancy

Refer to Google Tenancy Steps. for details on creating the accounts and keys (aka certificate)

We are working on making this screen available to Local Site Administrators to allow full self-onboarding.

Step 4b Accounts will provision to Google

Once the tenancy is configured accounts will provision to Google, see below

Step 4c Set SIMS ID Google Preferences

Within SIMS ID > Preferences > Connected Services > Google, the below configurations are available

Auto Provisioning of Users and Groups

You are advised to set Staff, Students and Groups to ON

G Suite enabled services

OU Mappings – Provision Staff and Students to a different location within GSuite.

Step 5 Issue usernames and passwords

Please see Regenerating and Distributing Temporary Passwords - updated for dealing with new year groups

Step 6 OPTIONAL Google Gradesync

Using Google Grades Write back to SIMS Assessment Manager

• Google are hosting a pilot to transfer data from Google Classroom Gradebook to SIMS Assessment Manager.

• To find out more and to learn to set up this feature please see Google Classroom Gradesync Pilot and the associated Google Grades Teacher Guide

Google Tenancy Steps.

Setting up the API link for provisioning

Visit: (https://developers.google.com/admin-sdk/directory/v1/quickstart/dotnet)https://developers.google.com/admin-sdk/directory/v1/quickstart/dotnet

Log into the tenancy using a tenancy admin users.

Go to (https://console.developers.google.com/flows/enableapi?apiid=admin&pli=1)https://console.developers.google.com/flows/enableapi?apiid=admin&pli=1

• Click “Continue” to create the API project

Click “Agree and Continue”

When the API has been enabled, click “Go to credentials”

Creating a Service Account

On the “Add credentials to your project” screen, click the “service Account” link

Click “Create Service Account”

Enter details and select options as shown below, then click on “Create”

Save the key to your Hard Drive – this will be used later.

Go to: Service Account Management

Add the sims-id-admin account to the SIMS ID Admin service account

Setting domain-wide delegation to for Calendar access

This is necessary only if you are planning on sending SIMS Timetable information to Google Calendars.

Navigate to Service Accounts.

Create a new Service Account called: simscalendar

Tick “G Suite Domain-wide Delegation” as shown below.

Set the role of this account to Organization Administrator as shown below

This creates a client with credentials as shown below, note the Type of client.

If the domain-wide delegation is missing the calendar provisioning will not work.