Hi everyone,
I’m trying to use Google Workspace authentication during Mac enrollment via ABM so user accounts are auto-created. However, the Google Workspace option in the enrollment profile is greyed out.
What could be causing this, and is there any workaround?
16 Views
@raelynn , this usually happens if your Google Workspace subscription doesn’t support LDAP integration. A Google Workspace Enterprise license is required for full authentication support. Plans like Business Standard won’t enable this option, which is why it appears greyed out in the enrollment profile.
Thanks for clarifying. If LDAP isn’t available, how does authentication work during enrollment? Can the local account creation be skipped in that case?
When LDAP isn’t configured, the enrollment flow works a bit differently.
During Mac enrollment via ABM, Hexnode Access will present two login screens: one for the local Mac account and another for Google Workspace login. The local account is mandatory and can’t be skipped, but you can pre-configure it in the enrollment profile, so users don’t have to create it manually.
Even without LDAP, Hexnode Access still authenticates users using their Google Workspace credentials. This integration is set up from: Policy > macOS > Security > Hexnode Access in the Hexnode portal.
Also, keep in mind that Hexnode Access policies apply only to new enrollments. Existing devices won’t be affected, so configuring the local account in the enrollment profile is important for a smoother setup.
Don't have an account? Sign up
