Google LDAP Multiple domains

[drhigh]

I work for a school that uses macbooks and Google Gsuite Education Fundamentals. I was able to connect to the LDAP, but we have multiple domains that separate student and staff email addresses. IE staff@domain.com / student@s.domain.com. I can log in with staff but not a student. Do I need to create a separate certificate or how do I add the subdomain to the current configuration?

Also, is there a way to quickly automate it because we have many computers to put this on to

 

[hobowankenobi]

I don't have a quick answer...but do wonder if multiple domains is the right architecture. Seems like a complication that may solve some problems, but create others.

Will both work as expected, so both students and staff can use the same device? Does that mean twice the amount on each device to install, points of failure, and certs or configs to update? Are there more than 2?