Wow, that federated login stuff is really complicated.  One thing in
your example assumes I know what yourappsdomain.com would be.  I don't
want to restrict the google apps account to my google apps logins, I
just want all google apps logins to work.  I basically have an Android
app that integrates in with my app engine server.  The Android Market
lets the user put in any Google account or Google Apps account.  I
just want that same account to work on my app engine server.  Google
accounts work, but Google Apps accounts do not.  I am able to get the
Auth token and authenticate the user via token with the google apps
account, it just appears that the ACSID cookie I send to the appengine
server denies access.  Now with federated login, is there a way to
authenticate using an auth token?

On Oct 5, 12:02 pm, Robert Kluin <robert.kl...@gmail.com> wrote:
> Yes, you will need to use the federated login (OpenID) stuff.
>
> The long-and-short of it is that you pass the federated_identity
> parameter to users.create_login_url.  You'll need to setup a page for
> users to tell you what goes in federated_identity somehow, perhaps by
> clicking a google logo or entering an apps domain.
>
> For Google accounts:
>   users.create_login_url(federated_identity='google.com/accounts/o8/id')
>   or
>   users.create_login_url(federated_identity='gmail.com')
>
> For an Apps account:
>   
> users.create_login_url(federated_identity='google.com/accounts/o8/site-xrds?hd=yourappsdomain.com')
>
> There is a little info here:
>  http://code.google.com/appengine/docs/python/users/overview.html
>
> And Wesley has a nice article about it here:
>  http://code.google.com/appengine/articles/openid.html
>
> Some info on Google Apps domains and OpenID:
>  http://groups.google.com/group/google-federated-login-api/web/openid-...
>
> Robert
>
> On Tue, Oct 5, 2010 at 11:21, David <s2kd...@gmail.com> wrote:
> > I'm having an issue with users not being able to authenticate with GAE
> > using a Google Apps account.  Regular Google account users can access
> > it fine.  How do I make it so it supports Google Apps logins in
> > addition?  Do I need to use the Federated Login stuff in GAE?  It is
> > currently not set to Federated because that makes it so neither Google
> > Apps nor Google accounts work. Can anyone help me out?
>
> > Thanks,
> > David
>
> > --
> > You received this message because you are subscribed to the Google Groups 
> > "Google App Engine" group.
> > To post to this group, send email to google-appeng...@googlegroups.com.
> > To unsubscribe from this group, send email to 
> > google-appengine+unsubscr...@googlegroups.com.
> > For more options, visit this group 
> > athttp://groups.google.com/group/google-appengine?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to