Restrict login by domain name

Marko_Džidić

Hello,

Please tell me is there option to restrict Google login only for company domain?

How can I change OAuth params? I need access to "hd" param...

https://developers.google.com/identity/protocols/OpenIDConnect#authenticationuriparameters

Claude_Schlesser

Hi Marko,

could you please tell me what exactly you are trying to achieve?
Do you want to enable login only with Google accounts that have an email address under a specific domain?

Regards,

Marko_Džidić

Hello,

Our company using Google Apps, and I want to allow login only from our domains.
That's possible if I just could add parameter "hd" inside OAuth API call...

More info at https://developers.google.com/identity/protocols/OpenIDConnect#authenticationuriparameters

Fred_Pinel

Hi,
Adding this parameter is not feasible for Google.
However, you could implement the domain restriction in the callback (server-side).
There are login events available to the browser (JS), but they do not provide the email address.

Regards

Marko_Džidić

Hello,

This is official Google parameter as You can see it on mentioned link.

We are using it on our custom apps, we have company-domain.com on Google Apps, and we allow only Google Auth from our company domain.

Fred_Pinel

Hi,
We understand your request. At present, this is not possible with our plugin.
We'll consider adding this feature, but, right now, cannot promise anything.

Regards.