CODEWITHSUNDEEP
openidgoogle-appsgoogle-openid
aaronsnoswell
aaronsnoswell

Reputation: 6251

Google Apps OpenID url

Problem:

My organisation, ExampleFooBar, uses Google Apps. On our website I want to enable OpenID Single Sign-In (like StackOverflow), but only allow @examplefoobar.com email addresses to sign in. What OpenID url should I use for a Google Apps email address?

What Google URL can I use to ensure only @examplefoobar.com email addresses can sign in?

Google documentation for Google Apps OpenID is at http://code.google.com/googleapps/domain/sso/openid_reference_implementation.html, but is incredibly unhelpful.

Upvotes: 11

Views: 6866

Answers (2)

Nic Rodgers
Nic Rodgers

Reputation: 283

The OpenID url https://google.com/accounts/o8/site-xrds?hd=yourdomain.com will restrict entries to @yourdomain.com. You also need to enable OpenID Single Sign In from the Google Apps admin page at http://www.google.com/a/cpanel/yourdomain.com/SetupIdp

You should also add an X-XRDS-Location header on your website at yourdomain.com/openid in the format:

X-XRDS-Location: https://www.google.com/accounts/o8/site-xrds?ns=2&hd=yourdomain.com

Upvotes: 0

Farid Nouri Neshat
Farid Nouri Neshat

Reputation: 30430

By aaronsnoswell:

The OpenID url google.com/accounts/o8/site-xrds?hd=examplefoobar.com will restrict email entries to @examplefoobar.com. Additionally, I had to enable OpenID Single Sign in from the Google Apps administrator page. Hope this helps someone!

http://jeremiahlee.com/blog/2009/09/28/how-to-setup-openid-with-google-apps/

Google Apps (for business) OpenID login for ASP.NET intranet site

Upvotes: 17

Related Questions