Realsmart Help

All guides / Platform

Make Chromebooks sign in with Realsmart (password or QR code)

A few settings in the Google Admin console make a school Chromebook's sign-in screen open the Realsmart sign-in page (SmartLogin) instead of Google's. Pupils and staff sign in there with their school username and password, the same as everywhere else, and arrive in their Google account already signed in.

If QR code login is on for your school, the same page has a QR login button. Younger pupils select it and hold their QR code up to the Chromebook's camera instead of typing a password.

Steps 1 to 3 all happen in the Google Admin console (admin.google.com), not in Realsmart. Google renames and moves its settings from time to time. If a name below doesn't match exactly, search for the setting by name in the Chrome settings page.

Before you start

  • The Chromebooks are enrolled and managed in your Google Workspace, with a Chrome Education Upgrade (or Chrome Enterprise Upgrade) licence. These settings don't reach unmanaged Chromebooks.
  • Google Workspace already signs in through SmartLogin. Your Google domain must use SmartLogin as its third-party identity provider (single sign-on). To check, open Google's sign-in page in a private browser window and enter a pupil's school email address. If you're taken to the Realsmart sign-in page, it's set up. If not, contact Realsmart support first, because everything below depends on it.
  • You can change Chrome settings in the Google Admin console.
  • For QR code sign-in only: QR code login is turned on in Realsmart (School settings → QR login), and pupils have their printed codes. See QR code login.
  • Your school's SmartLogin address, for Step 3: https://smartlogin.realsmart.co.uk/smartlogin/login?school=<your school ID>, or ?trust=<your trust ID> if your trust signs in through one page listing all its schools. Realsmart support can confirm the exact address.

Which organisational unit (OU)? In Step 1 the user settings follow the OU of the person signing in. In Steps 2 and 3 the device settings follow the OU the Chromebook is enrolled in. To apply a setting everywhere, leave the top OU selected; otherwise pick the OU you want, such as your learners or your Chromebooks. Realsmart's sync decides which OU each person's Google account is in. See Google OU settings.

Steps

Step 1: Turn on SAML single sign-on for Chrome devices

In the Google Admin console, go to Devices → Chrome → Settings → Users & browsers and choose the OU.

  • Single sign-on → select Enable SAML-based single sign-on for Chrome devices.
  • Optional: Maximum user session length signs people out automatically after the time you set. For shared Chromebooks with QR sign-in, we suggest 120 minutes.
  • Optional: SAML single sign-on login frequency sets how often the Chromebook sends people back through the Realsmart sign-in page instead of letting them in with the password saved on the device.

Select Save.

Step 2: Send the sign-in screen straight to Realsmart

Go to Devices → Chrome → Settings → Device settings (newer consoles may label the tab Device) and choose the Chromebooks' OU.

  • Single sign-on IdP redirection → select Allow users to go directly to SAML SSO IdP page. The sign-in screen then opens the Realsmart page straight away, instead of asking for a Google email address first.
  • Single sign-on cookie behavior → select Enable transfer of SAML SSO cookies into user session during sign-in. This carries the Realsmart sign-in into the session, so people aren't asked to sign in again when they open Realsmart in the browser.
  • Optional, recommended for shared Chromebooks: User data → Erase all local user data. This clears each person's local files and settings from the Chromebook when they sign out.

Select Save.

Step 3: Let the sign-in screen use the camera (QR code sign-in only)

Skip this step if pupils only sign in with a password.

Still in the device settings, find Single sign-on camera permissions and add your school's SmartLogin address from Before you start, for example https://smartlogin.realsmart.co.uk/smartlogin/login?school=1234. Select Save.

Without this, the Chromebook sign-in screen won't let the Realsmart page use the camera, so QR codes can't be scanned.

Step 4: Test on one Chromebook

Sign out of, or restart, a Chromebook in the OU you changed. The sign-in screen should show your school's Realsmart sign-in page, with your school's name and logo above Username and Password.

  • Password: enter a test pupil's school username (without the domain) and password, then select Sign in.
  • QR code: select QR login and hold the pupil's code up to the camera. The page says Signing you in… once it has read the code. Codes scan best when they're printed on a white background.

If the person also has to use two-factor authentication, they're asked for their code next. See Set up two-factor authentication when you sign in.

QR codes for pupils

Pupils need their own printed QR code before they can sign in this way. Admins generate and print codes from the Users page, and teachers who are allowed to reset passwords can do it from the Reset passwords page. See QR code login and Reset passwords → QR login codes.

If a pupil loses their card, use Delete & regenerate QR codes, not a reprint. The old code keeps working until it is replaced. See QR code login → A lost code.

Troubleshooting

The Chromebook still shows Google's sign-in screen. The device settings from Step 2 haven't reached it. Check the Chromebook is enrolled and sits in the OU you changed, then restart it.

The Realsmart page doesn't load, or sign-in stops part-way. The sign-in screen has to reach the Realsmart sign-in page (smartlogin.realsmart.co.uk) and Google's sign-in services before anyone is signed in. Check that your firewall, web filter or proxy allows them. If your internet filtering or proxy is managed by an outside provider, ask them to allow Chromebook sign-in through it.

There's no QR login button. QR code login is off for your school. Turn on Enable QR code login under School settings → QR login and select Save.

The QR page says "Camera access is blocked". Check Step 3: the address must be in Single sign-on camera permissions, in the device settings for the OU the Chromebook is in. Then select Try again.

Other camera messages on the QR page. No camera found — connect a camera, then select Try again. Your camera is busy — close any other app that's using it, then Try again. The camera didn't start — Try again, or select Use username & password. QR code sign-in isn't available here means that sign-in window can't use a camera at all, so use Use username & password. If the Chromebook has more than one camera, Switch camera appears while it's scanning.

"QR Code is invalid". The code has been replaced or deleted since it was printed. Print the pupil's current code. See QR code login.

"You are not allowed to login at this time…". The pupil has a login window set, or is blocked from signing in. See Edit a user → Login window.

"Your school has paused sign-in for the holidays. You can sign in again when the holiday ends." The pupil is covered by a holiday pause. Their sign-in comes back on its own when the dates end.

Still stuck? Send Realsmart support your school name, the Chromebook's OU, whether password sign-in works on the same Chromebook, and a photo of the screen showing the message.