It is very simple to know if you need to use google apps or not. Here is the article about it: http://code.google.com/appengine/articles/auth.html
1.) Do you want to authenticate users from a specific google apps domain? (Note: Saying yes will exclude gmail and general google accounts) 2.) Do you need to have a custom domain name? If neither of there is true then you don't need google apps. If either is true then you do. If you *just* want a custom domain name then you will need to create a "free" google apps account for your domain-name mappings; it will not need to have any users created (your users will not be in there because they will come from the google accounts authentication domain). So, to answer your question, create a free google apps account. Add your domain mapping, and never go in there again. Now, when it comes to security, and authorization, you will have to write your own using some kind of application-based security (like a filter). You will need to maintain your own roles (and membership). This will most likely mean creating security entities keyed to their google email address from the current logged in user. As I said above, you will not need to pay for that authentication service (even with a custom domain name). Good luck to you :) On Wed, Feb 24, 2010 at 11:54 PM, Stephan Hartmann <hartm...@metamesh.de> wrote: > You can use Google Apps Standard accounts or common Google Accounts (e.g. > Goggle mail) as well (you have to choose when you setup your app). > If you choose not to use Google Apps Accounts for your app, you still can > assign it a subdomain of your Google Apps domain. > > For implementing your own custom authentication i'd try > http://securityfilter.sourceforge.net/ > It has a deployment descriptor-like configuration. > If you choose SecurityFilter, you should take care of static files because > GAE will serve them directly bypassing servlet filters. > > Regards, > Stephan > > > 2010/2/24 Houston startup coder <stephenh...@gmail.com> >> >> We need users to be able to access our app on our domain, so I went >> into my Dashboard and clicked "Add New URL" to set this up, and then >> added a CNAME at GoDaddy. We use Google Apps for our domain >> internally, but do not want the users of our App Engine app accessing >> Mail, Documents, Sites, etc. However, my understanding is that the >> only way I could point a subdomain at our App Engine app was to use >> Google Apps and "Add New URL". >> >> We're going to have an installed desktop application access our app >> via ClientLogin, and it's fine if that needs to talk to >> <myapp>.appspot.com in order to use HTTPS. The plan is for the >> installed application to hide the credentials it uses to safely >> communicate with our App Engine application behind the scenes. >> >> The only time our users will directly interact with the App Engine app >> is when they login via a web browser. For that, we'd like to use >> custom authentication because I don't want to have to pay $50/user/ >> year for them to access via a Google Apps Premier account. But it >> sounds like this means we can't safeguard portions of the site with >> the deployment descriptor if we're using custom authentication: >> >> >> http://code.google.com/appengine/docs/java/config/webxml.html#Security_and_Authentication >> >> Is this true? How can we handle this? >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Google App Engine for Java" group. >> To post to this group, send email to >> google-appengine-j...@googlegroups.com. >> To unsubscribe from this group, send email to >> google-appengine-java+unsubscr...@googlegroups.com. >> For more options, visit this group at >> http://groups.google.com/group/google-appengine-java?hl=en. >> > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine for Java" group. > To post to this group, send email to google-appengine-j...@googlegroups.com. > To unsubscribe from this group, send email to > google-appengine-java+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/google-appengine-java?hl=en. > -- You received this message because you are subscribed to the Google Groups "Google App Engine for Java" group. To post to this group, send email to google-appengine-j...@googlegroups.com. To unsubscribe from this group, send email to google-appengine-java+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine-java?hl=en.
