Hi everyone,

I am working on a simple application (actually a website) on Google
App Engine.
This application should be accessible only for a selected Google Apps
domains list.

These domains are corporate Google Apps subdomains. One Google Apps
account domain handle several subdomains, one for each business unit.

I would like to restrict my apps to those domain.

However, there is only 3 ways to secure my app (Application Settings /
Authentication Options in Google App Engine Console) :
- Google Accounts API
- Google App Domain
- Open ID (Federated Login)

For the first one, it can work, however, as we are using Federation
Login for all Google Apps domains, we dont want the user to login
twice : one on the Google Account Sign-in webpage which is displayed
automatically when we choose Google Accounts, and then on the
federation page.
Because with this Google App Engine authentication, the user is first
redirected to : http://accounts.google.com
then enter its credentials Google Apps, then Google tell him that
federation is working for this domain so he just need to Click to be
redirected.
This is not user friendly.

Second one, works only with one Google App Primary domain. Subdomain
doesnt work with this feature...

Maybe third one, Open ID/ Federated login, can work, but how ?


Thx
Antoine

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to