Topic on Extension talk:OpenID Connect

Restricting Google Auth by domain?

3
Summary by CCicalese (WMF)

Use authorization plugin

34.192.31.106 (talkcontribs)

Hi Cindy! My organization uses Google Apps as an SSO, and I'm trying to use OpenIDConnect to provide authentication to our wiki. I've been able to manage to follow the Google example in the documentation and get it set up with the basics, but we would like to be able to restrict logins to just people with email addresses on our domains. Does this plugin have a facility to do so? If not, do you have any instructions for how to use both this plugin (for an internal OpenIDC server) and the GoogleLogin extension (which can restrict by an array of domains?)

Cindy.cicalese (talkcontribs)

I wrote another extension for exactly that purpose :-) Extension:Email Authorization You can add individual email addresses or you can specify an entire domain with "@mycompany.com".

34.192.31.106 (talkcontribs)

Excellent, thank you!