Wow…wish it were simpler. I’ll send it along to our tech people.
I did some fooling around yesterday, so I'll share what I learned in case it's helpful to anyone.
Since I still don't know the answer re: domain aliases, I registered a new domain altogether to play with. Then I went to the domain settings -> domain names page and clicked "Add a domain alias or domain." Then I chose "Add another domain" and typed it in. That's when I hit the first snag -- it said "multiple domains are not supported with Postini."
Our background with Postini: Didn't enable it when we first set up GAE, then added it later when it was still free (not archiving, just message security). Changed MX records and all that. Then, at the beginning of this month, as per their email notifications, Google swallowed that basic functionality and migrated it into the main apps admin panel (thank goodness!) so we switched MX records back and were effectively done with Postini. But, it was still showing up in the admin dashboard, and whenever I tried to click a link to its settings page to disable it, it would just return me to the dashboard. Turns out this is a known issue, and when I reported it to Google Support yesterday, they had an engineer fix it for me (in under two hours!) and then I was able to proceed with the adding-a-domain process.
So: Now, if I pull up a user and click "rename user", it has that option that Rob's had:
Woot! So I did this for Mr. Guest here, then went to the main/generic google.com site and clicked Log In; entered the newly-defined email address; and, I'm in!
HOWEVER. If I go to a login page within our organization, e.g.
then, George can't log in. Which makes sense since it shows right there that it implies the primary domain, "@hanovernorwichschools.org". (I tried it with and without the @rayhanover.org portion just in case, but no dice.) If, however, I manually change the URL from
And George CAN log in there.
So that's a snag, since users are likely to encounter the previous "version" of the login during their travels (like if they begin at our Start page, as they've all been told to do.) Sigh. I'm not sure what to do about that. Make a second start page for our little kids perhaps (since the original goal of this whole adventure was to make less typing for youngsters logging in.)
Regarding doing it globally -- Rob had said that he had to do it one-by-one. But, gam can do it: http://code.google.com/p/google-apps-manager/wiki/ExamplesMultiDomain and scroll down to "Moving Users between Domains." So you could script it to do a bunch of users. :) FYI I use gam on a Mac running Snow Leopard and it works swimmingly, once you do the up-front OAuth magic. The documentation is pretty awesome.
Ah, and that page led me to this: http://support.google.com/a/bin/answer.py?hl=en&answer=182081 List of limitations of multi-domain support. It mentions the thing I just documented above:
Well, OK then!
Hope this helps. I still want to know about changing domain aliases into secondary domains, but I have a better sense of the whole picture so can probably find the answer if I dig a bit deeper.
On Wed, Feb 1, 2012 at 9:29 AM, Elizabeth McCarthy <[log in to unmask]> wrote:
We are dealing with the very same issue, so thanks for putting this out. When you noted “And he can, on a per-user basis, set them up to be able to sign in as [log in to unmask]” does that mean there is no way to do this globally? I was under the impression that the only way to change a domain name is to migrate your GAE to a whole new GAE domain, as the alais doesn’t really help with the long sign-in problem.
I want to do something in GAFE and I don't know how to ask the question, so I apologize for the long-windedness of this.
Right now, we have several domain aliases for our primary domain, hanovernorwichschools.org. [log in to unmask] can also receive email sent to [log in to unmask], or [log in to unmask], etc. However, she can only sign in to Google services using the whole [log in to unmask] "version" of herself, because that's the canonical domain under which the Apps installation was created.
Here's what the email settings portion of my admin panel looks like right now:
And here's what my domain names tab looks like:
Recently I learned from Mr. Gervais that it is possible to make it so that users can log in with a different username/email address. Again, pictures are easier than words; his GApps admin panel looks like this (sanitized):
And he can, on a per-user basis, set them up to be able to sign in as [log in to unmask]:
That popup menu for choosing "Primary email address" is what I want to have, so that our youngsters don't have to type a mile-long domain name to log in. If I want to accomplish this with one of my existing domains, say, sau70.org, can/should I delete it from being a domain alias, and re-add it via "add a domain"? Is that how I get to where I want to be?
Apologies if this has been asked and answered on the list; I did search the archives for various phrases like "google secondary domain" etc. but I don't really know what terminology to use since I'm not sure what I'm even asking!
Marion Bates, District Technology Supervisor
School Administrative Unit 70
Hanover, NH | Norwich, VT
Office: (603) 643-3431 x2714