Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Google Apps domain as OpenID provider

  1. How can I make my Google Apps domain to be OpenID provider. Is there any documentation, tutorial, working example something?

  2. How to authenticate users in my own application using Google Apps domain authentication (I mean without OpenID). I've heard that it's something about gdata api but I don't know where to start. Are there any useful tutorials howtos or working examples?

I would like to know about free or open source solutions.

like image 247
Alex Bolotov Avatar asked Jul 29 '09 22:07

Alex Bolotov


People also ask

Is Google an OpenID provider?

Google's OAuth 2.0 APIs can be used for both authentication and authorization. This document describes our OAuth 2.0 implementation for authentication, which conforms to the OpenID Connect specification, and is OpenID Certified.

Does Google workspace support OIDC?

Google provides pre-integrated single-sign on (SSO) for many cloud applications. Our SSO feature includes OpenID Connect (OIDC) identity provider support and support for Security Assertion Markup Language (SAML) 2.0.

Who are OpenID providers?

An identity provider, or OpenID provider (OP) is a service that specializes in registering OpenID URLs or XRIs. OpenID enables an end user to communicate with a relying party.


1 Answers

You don't have to do anything to make your Google Apps domain an openid provider. BUT, Google's special OpenID service for Apps for Domains requires OpenID relying parties to implement a special (proprietary) discovery mechanism and most RPs don't [yet]. So, if you're testing against that, it won't work.

One way to test is go to an OpenID RP that uses RPXNow. RPX is one of those RPs that do accept Google's new discovery mechanism. jyte.com for example. Try logging in there.

like image 51
Andrew Arnott Avatar answered Oct 11 '22 15:10

Andrew Arnott