---
title: 'Google Authd broker: authenticate to Ubuntu Desktop/Server with your Google
  account'
description: With the Authd broker for Ubuntu you can use your personal or Workspace
  Google account to authenticate to Ubuntu Server or Desktop
url: https://canonical.com/blog/google-authd-broker-ubuntu-desktop-server?format=md
---

1. [Blog](https://canonical.com/blog)
2. Article

---

[Massimiliano Gori](https://canonical.com/blog/author/massigori "More about Massimiliano Gori")

6 March 2025

# Google Authd broker: authenticate to Ubuntu Desktop/Server with your Google account

[desktop](https://canonical.com/blog/tag/desktop)
[Identity Management](https://canonical.com/blog/tag/identity-management)
[Server](https://canonical.com/blog/tag/server)
[Ubuntu](https://canonical.com/blog/tag/ubuntu)

---

Share the article

Today we are announcing the introduction of Authd support for [Google IAM](https://cloud.google.com/security/products/iam?gad_source=1&gclid=Cj0KCQiA-5a9BhCBARIsACwMkJ53ZTZAyltunbcLbiW2vCCTqBIJTf7oeLRourFQLsigMU6-wBvFNjEaAs9uEALw_wcB&gclsrc=aw.ds), allowing all Ubuntu users to use their Google account to authenticate to their desktop and servers.

The [Google broker snap](https://snapcraft.io/authd-google) for Authd is available for free on Ubuntu Desktop and Server 24.04 and it works with both personal and Workspace Google accounts.

## What is Authd?

In November 2024, we [announced the general availability of Authd](https://ubuntu.com/blog/authd-oidc-authentication-for-ubuntu-desktop-server): a new authentication daemon for Ubuntu that allows direct integration with cloud-based identity providers for both Ubuntu Desktop and Server. At launch, we supported [Microsoft Entra ID](https://www.microsoft.com/en-gb/security/business/identity-access/microsoft-entra-id) (formerly Azure Active Directory) and since then we have seen a strong adoption in enterprises that wanted to centralize their identity management controls.

Unlike traditional approaches that require the installation of a standalone infrastructure component (e.g. FreeIPA or Vault), Authd allows Ubuntu endpoints to integrate directly with the cloud, reducing maintenance complexity and centralizing visibility of all authentication events.

Authd features a modular structure that combines a privileged dev, exposing a normalized API over DBUS, and a broker snap to facilitate easy integration with different cloud services. This setup leverages the Oauth 2.0 Device Authorisation Grant (commonly referred to as the Device Flow) to help maintain more robust security and effective user authentication

## Use your Google account to authenticate to Ubuntu

Google IAM is one of the most used consumer identity providers and we decided to support it as the second identity provider in order to give small businesses using Ubuntu and all our community members  the chance to experience Authd without needing to pay expensive monthly SaaS subscriptions.

With the appropriate configuration, the Google Authd broker is able to support both enterprise Google Workspace accounts and personal Google accounts. You can learn more about how to configure your machine by consulting the [official product documentation](https://canonical-authd.readthedocs-hosted.com/en/latest/).

## Device ownership, allowlist, and permission management

In addition to Google support we are also extending Authd functionalities to include the following highly requested from the community:

* **Allowlist** allows you to restrict machine access to a specified list of users who are allowed to log in after a successful authentication with the identity provider
* **Privilege management** administrators can configure custom claims on the identity providers to assign users to a specific linux group (e.g. sudo). This allows permission management on remote machines directly through the identity provider, e.g. by placing users into specific groups
* **Device ownership** introduces rules to define device ownership based on login rules. This feature is designed to simplify corporate laptop provisionings for companies with remote workforces.

All these additional features are supported on both the Entra ID and Google broker snaps and will also be used internally by Canonical on our corporate laptops.

## Get the new broker and additional resources

* [Get the new Google Authd broker on Snapcraft](https://snapcraft.io/authd-google)
* [Read the documentation](https://canonical-authd.readthedocs-hosted.com/en/latest/)
* [View the project on Github](https://github.com/ubuntu/authd)
* [Learn how to deploy it at scale with Landscape on Desktop and Server](https://ubuntu.com/blog/entra-id-authentication-on-ubuntu-at-scale-with-landscape)
* [Read our Active Directory integration whitepaper](https://ubuntu.com/engage/microsoft-active-directory)

[Get in touch

Interested in running Ubuntu in your organization?](https://ubuntu.com/about/contact-us/form)

## Sign up for our newsletter

Get the latest Canonical news and updates in your inbox.

Work email:

\*I agree to receive information about Canonical's
products and services.

By submitting this form, I confirm that I have read and agree to [Canonical's Privacy Policy](https://canonical.com/legal/dataprivacy).

Sign up

## Share on

---

## Related posts

[### A decade of Ubuntu on IBM Z and IBM LinuxONE](https://canonical.com/blog/a-decade-of-ubuntu-on-ibm-z-and-ibm-linuxone)

This year we celebrate a decade of Ubuntu Server support on the s390x architecture: marking a long-standing collaboration between Canonical and IBM that began at LinuxCon 2015....

[Pedro Lazzarotto](https://canonical.com/blog/author/pedro-lazzarotto)

12 June 2026

[### Arduino® VENTUNO™ Q is available for pre-order with Ubuntu pre-installed](https://canonical.com/blog/arduino-ventuno-q-is-available-for-pre-order-with-ubuntu-pre-installed)

London, UK – August 25, 2026 – Following our initial collaboration announcement in March 2026, Canonical and Arduino (a subsidiary of Qualcomm Technologies, Inc.) are excited...

[Canonical](https://canonical.com/blog/author/canonical)

25 August 2026

[### Canonical becomes Gold Sponsor of Trifecta Tech Foundation](https://canonical.com/blog/canonical-becomes-gold-sponsor-of-trifecta-tech-foundation)

Canonical is pleased to announce it is now a Gold Sponsor of the Trifecta Tech Foundation, a non-profit that creates open source building blocks for critical infrastructure...

[Canonical](https://canonical.com/blog/author/canonical)

30 June 2026

[### Ubuntu Summit 26.04: connected by open source](https://canonical.com/blog/ubuntu-summit-26-04-connected-by-open-source)

What an incredible experience! Ubuntu Summit 26.04 has officially drawn to a close, but the energy from our global community is still buzzing – in the comments section, on...

[ilvipero](https://canonical.com/blog/author/ilvipero)

22 June 2026
