<story><title>Google Credential Provider for Windows</title><url>https://tools.google.com/dlpage/gcpw/</url></story><parent_chain></parent_chain><comment><author>monocasa</author><text>I&amp;#x27;ll throw out there that I work for JumpCloud, an Identity Management Provider, and we have a credential provider as well for seamless Windows login.  We also have a Mac login window so your users have a seamless experience regardless of the OS (our Linux solution doesn&amp;#x27;t really need one).  We&amp;#x27;ve also got LDAP, RADIUS, gsuite, and O365 backends (plus more I&amp;#x27;m forgetting I&amp;#x27;m sure) and a ton of other niceties.  Check us out if you&amp;#x27;re into that.&lt;p&gt;We also go beyond this and support MFA on Windows, Mac, Linux login.&lt;p&gt;Orgs with less than 10 users are free.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;jumpcloud.com&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;jumpcloud.com&amp;#x2F;&lt;/a&gt;</text></comment>
<story><title>Google Credential Provider for Windows</title><url>https://tools.google.com/dlpage/gcpw/</url></story><parent_chain></parent_chain><comment><author>solatic</author><text>&amp;gt; After GCPW installation, the  device appears in the Admin console Windows device list after the user signs in with their Google Account for the first time.&lt;p&gt;We use G Suite at work (legacy decision) and it really kills me just how poorly the G Suite product team seems to understand enrollment and authorization workflows.&lt;p&gt;No, I don&amp;#x27;t want to allow every device to register itself into the device list. If I&amp;#x27;m managing installations of organization-owned devices, then I want to pre-register the device into a device whitelist that I maintain before I allow that device unfettered access to protected resources.&lt;p&gt;This is right up there with other dumb moves like requiring AWS roles to be added per-user for SAML login and functionally being unable to setup G Suite as an OIDC IdP for Kubernetes because G Suite refuses to expose group membership (or even more importantly, transitive group membership) to service providers.&lt;p&gt;If Google uses G Suite internally then I have zero idea how they manage to actually get anything done, unless they have a lot of in-house automation that they haven&amp;#x27;t open-sourced. It doesn&amp;#x27;t make sense unless they&amp;#x27;re not eating their own dogfood.</text></comment>