Identity Crisis Derek Parham (Former Tech Lead - Google Apps) 4+ - - PowerPoint PPT Presentation

identity crisis
SMART_READER_LITE
LIVE PREVIEW

Identity Crisis Derek Parham (Former Tech Lead - Google Apps) 4+ - - PowerPoint PPT Presentation

Identity Crisis Derek Parham (Former Tech Lead - Google Apps) 4+ years 40+ teams 4 million organizations 40 million active accounts April 2002 April 2004 yourname@gmail.com yourname@your-domain.com Gmail for your domain Administrator


slide-1
SLIDE 1

Identity Crisis

Derek Parham (Former Tech Lead - Google Apps)

slide-2
SLIDE 2

4+ years 40+ teams 4 million organizations 40 million active accounts

slide-3
SLIDE 3

April 2002

slide-4
SLIDE 4
slide-5
SLIDE 5

yourname@gmail.com

April 2004

slide-6
SLIDE 6

yourname@your-domain.com

slide-7
SLIDE 7

Gmail for your domain

  • Administrator has full control

○ Create/delete accounts ○ Reset password ○ Access to control panel ○ Control what service their users can access

  • End users log into multiple accounts

○ Personal jane234@gmail.com ○ Business jane@altostrat.com ○ Edu janew@school.edu

  • Customized login page
slide-8
SLIDE 8

Feb 2006

slide-9
SLIDE 9

http://mail.google.com

slide-10
SLIDE 10

http://mail.google.com/a/altostrat.com

slide-11
SLIDE 11

Problem 1: Conflict accounts

Only an issue if we're successful... ...so a good problem to have!

slide-12
SLIDE 12

Product launches

Consumer:

May 2005 iGoogle Oct 2005 Google Reader April 2006 Google Calendar June 2006 Google Checkout June 2006 Picasa Sept 2006 Google Docs Dec 2006 Blogger

slide-13
SLIDE 13

Problem 2: Slow launches + Subset

Consumer:

May 2005 iGoogle Oct 2005 Google Reader April 2006 Google Calendar June 2006 Google Checkout June 2006 Picasa Sept 2006 Google Docs Dec 2006 Blogger

Apps:

Aug 2006 Google Calendar Feb 2007 Google Docs

slide-14
SLIDE 14
slide-15
SLIDE 15

Problem 3: Sharing

Share with: jane@altostrat.com

slide-16
SLIDE 16

Share with: jane@altostrat.com

slide-17
SLIDE 17

What do we want?

  • All Apps accounts access to all services
  • Resolve conflict accounts
  • Allow multi-login between accounts
  • Admins can turn on/off every service
  • Administrators control accounts @domain.com
slide-18
SLIDE 18

Projects Required for Solution

  • Get all Apps account to log into 1 login page
  • Tool to help people resolve conflict accounts
  • Allow multi-login in a standard way
  • Create On/Off switch for every service (60+)
  • Migration tool for Admins
slide-19
SLIDE 19

Single Login page

http://mail.google.com/a/altostrat.com http://mail.google.com

slide-20
SLIDE 20

Single Login page - SAML

slide-21
SLIDE 21

Single Login page

slide-22
SLIDE 22

Resolve Conflict Accounts

Login with: jane@altostrat.com

slide-23
SLIDE 23

Resolve Conflict Accounts

slide-24
SLIDE 24

Multi Login

slide-25
SLIDE 25

Multi Login

slide-26
SLIDE 26

Multi Login

slide-27
SLIDE 27

Multi Login

slide-28
SLIDE 28

On/Off Switch for Every Service

slide-29
SLIDE 29

Administrator: "Who the hell is that?"

Migration tool for Admins

slide-30
SLIDE 30

Migration tool for Admins

jane%altostrat.com@gtempaccount.com

slide-31
SLIDE 31

Where's the Advil?

  • Multi Login with SAML
  • You can attach any email address to a gmail

address OR you can attach a gmail address to any consumer account

  • Users want to migrate data from conflict

accounts

  • Migrating users while they're logged in
slide-32
SLIDE 32

4+ years 40+ teams 4 million organizations 40 million active accounts 1 decision

slide-33
SLIDE 33

Identity Crisis

Questions?

slide-34
SLIDE 34

Background feb 2006 - launch gmail

admin password reset, multi-login through domain in url aug 2006 - launch calendar, talk, pages feb 2007 - premier june 2007 - first design docs june 2008 - talks with L&S

  • ct 2008 - service code work started

march 2009 - first account moved over dec 2009 - google.com moves over june 2010 - beta launch nov 18 2010 - public launch

slide-35
SLIDE 35

Shadow accounts Multi-login Domain migrator - timeline Email as id

slide-36
SLIDE 36

Start of problem

slide-37
SLIDE 37
  • History

○ Service on the internet with email login ○ Want to offer different service to business users

  • Decisions

○ Want to separate out admin ownership from consumer ownership

slide-38
SLIDE 38

History

Start with a consumer service bob@gmail.com Google Answers Gmail

slide-39
SLIDE 39

Add corporate functionality

annie@domain.com has admin