Hey Antoine,
Use OpenID / Federated login. You can provide users with a list of
subdomains, or check them against that. I usually either give users
the option to enter their domain or email address (from which I can
deduce the domain), then redirect them to the proper page. It is
pretty straight forward to do.
I think Wesley's article on federated login provides all the basics.
http://code.google.com/appengine/articles/openid.html
Robert
On Sun, Jan 29, 2012 at 22:57, Antoine <[email protected]> wrote:
> Hi everyone,
>
> I am working on a simple application (actually a website) on Google
> App Engine.
> This application should be accessible only for a selected Google Apps
> domains list.
>
> These domains are corporate Google Apps subdomains. One Google Apps
> account domain handle several subdomains, one for each business unit.
>
> I would like to restrict my apps to those domain.
>
> However, there is only 3 ways to secure my app (Application Settings /
> Authentication Options in Google App Engine Console) :
> - Google Accounts API
> - Google App Domain
> - Open ID (Federated Login)
>
> For the first one, it can work, however, as we are using Federation
> Login for all Google Apps domains, we dont want the user to login
> twice : one on the Google Account Sign-in webpage which is displayed
> automatically when we choose Google Accounts, and then on the
> federation page.
> Because with this Google App Engine authentication, the user is first
> redirected to : http://accounts.google.com
> then enter its credentials Google Apps, then Google tell him that
> federation is working for this domain so he just need to Click to be
> redirected.
> This is not user friendly.
>
> Second one, works only with one Google App Primary domain. Subdomain
> doesnt work with this feature...
>
> Maybe third one, Open ID/ Federated login, can work, but how ?
>
>
> Thx
> Antoine
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected].
> For more options, visit this group at
> http://groups.google.com/group/google-appengine?hl=en.
>
--
You received this message because you are subscribed to the Google Groups
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/google-appengine?hl=en.
