Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login.

However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other way around. That is, I'd like to allow users to log into my external servers using the accounts I created in Google Apps.

Has anyone successfully discovered a way to use a Google Apps domain as an Open Directory, Active Directory, or LDAP provider?

share|improve this question

This is absolutely impossible.

Yes, there are means to synchronize between local directory services and Google's directory, but that doesn't mean that you can use Google's directory like AD, OD, or even a simple LDAP service.

Now, if all you want is to enable users to be able to use their Google credentials to sign into your application, look into OpenID.

share|improve this answer
Google certainly doesn't provide an LDAP interface, but someone could write a program to pull account details from the API, and add them to an LDAP data source. They only thing you can't get are the passwords. – Zoredache Feb 24 '12 at 19:10
@Zoredache - sure, that would be possible. Probably not a reality for the OP, though. (but maybe that's an inappropriate assumption) – EEAA Feb 24 '12 at 19:11 provides a backend for OpenLDAP that can at least authenticate users against various services (IMAP, POP, SSH, etc.). It would be possible to write a plugin to use the Google Client Login API directly if you wanted.

This solution would at least work for an app that used LDAP for authentication, but is far from a complete LDAP/AD server.

share|improve this answer
This doesn't answer the how question, and I believe it is more a comment than an answer. – vgoff Nov 17 '12 at 4:02
It does answer the question. – Bhargav Nanekalva Sep 11 '13 at 10:56

so basically, you want to have Google Apps act as your domain controller?

I don't think Google Apps has the ability to actually be the DS (directory service). Now, that being said, you can use ADFS 2.0 in your domain to allow those Google Apps users to sign into claims-based applications that you host.

This walkthrough (which goes over extending SharePoint with OpenID logins) addresses ADFS 2.0, SSO, Federation, and all the other principles you need to grasp to make this happen.

share|improve this answer
original link is marked as outdated, fixed link to point to up-to-date article is… (edit is too short to be submitted so I put it in comment) – CharlesB Mar 12 '12 at 16:00
Thank you! Updated is (almost) always best! – JohnThePro Mar 13 '12 at 14:57
sadly the updated link is also dead. – Paul M Jul 2 '14 at 9:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.