@AmaltasCoder: This approach is not working if users associate multiple emails with their account and try to login with an email that does not contain the proper domain part. I've also started using this approach, but you'll most likely come across some "I cannot login with my email" complaints. So I've switched to the approach proposed by Robert - even though I'd love to have a nicer login process.
On Dec 6, 8:46 am, AmaltasCoder <agarwalmegh...@gmail.com> wrote: > My GAE app only allows Google Account and Google Apps users. To login > Google Apps users I provide a login page with a text box field asking > them their email. In server side I simply extract the domain portion > of the email and create login url using > > users.create_login_url(federated_identity='google.com/accounts/o8/site- > xrds?hd=yourappsdomain.com') > > How can I find whether the extracted domain is actually a Google Apps > domain? what if someone simply provides say yahoo.com? I would like to > give the user a warning stating that the domain is not present on > google apps and he should contact system admin. > > On Oct 10, 6:57 am, Robert Kluin <robert.kl...@gmail.com> wrote: > > > > > > > > > Hi David, > > I am not familiar with the android marketplace, sorry. > > > I currently use two techniques. First, on my generalloginpage > > users can selectGoogleAppsthen enter the domain in a text box. > > Second, likegoogleservices, users can go to a /theirdomain.com > > enpoint and I fill in the domain and send them to the rightloginpage > > -- also pretty easy. > > > Robert > > > On Thu, Oct 7, 2010 at 03:34, David <s2kd...@gmail.com> wrote: > > > Wow, that federatedloginstuff is really complicated. One thing in > > > your example assumes I know what yourappsdomain.com would be. I don't > > > want to restrict thegoogleappsaccountto mygoogleappslogins, I > > > just want allgoogleappslogins to work. I basically have an Android > > > app that integrates in with my app engine server. The Android Market > > > lets the user put in anyGoogleaccountorGoogleAppsaccount. I > > > just want that sameaccountto work on my app engine server. Google > > > accounts work, butGoogleAppsaccounts do not. I am able to get the > > > Auth token and authenticate the user via token with thegoogleapps > > >account, it just appears that the ACSID cookie I send to the appengine > > > server denies access. Now with federatedlogin, is there a way to > > > authenticate using an auth token? > > > > On Oct 5, 12:02 pm, Robert Kluin <robert.kl...@gmail.com> wrote: > > >> Yes, you will need to use the federatedlogin(OpenID) stuff. > > > >> The long-and-short of it is that you pass the federated_identity > > >> parameter to users.create_login_url. You'll need to setup a page for > > >> users to tell you what goes in federated_identity somehow, perhaps by > > >> clicking agooglelogo or entering anappsdomain. > > > >> ForGoogleaccounts: > > >> users.create_login_url(federated_identity='google.com/accounts/o8/id') > > >> or > > >> users.create_login_url(federated_identity='gmail.com') > > > >> For anAppsaccount: > > >> > > >> users.create_login_url(federated_identity='google.com/accounts/o8/site-xrds > > >> ?hd=yourappsdomain.com') > > > >> There is a little info here: > > >> http://code.google.com/appengine/docs/python/users/overview.html > > > >> And Wesley has a nice article about it here: > > >> http://code.google.com/appengine/articles/openid.html > > > >> Some info onGoogleAppsdomains and OpenID: > > >> http://groups.google.com/group/google-federated-login-api/web/openid-... > > > >> Robert > > > >> On Tue, Oct 5, 2010 at 11:21, David <s2kd...@gmail.com> wrote: > > >> > I'm having an issue with users not being able to authenticate with GAE > > >> > using aGoogleAppsaccount. RegularGoogleaccountusers can access > > >> > it fine. How do I make it so it supportsGoogleAppslogins in > > >> > addition? Do I need to use the FederatedLoginstuff in GAE? It is > > >> > currently not set to Federated because that makes it so neitherGoogle > > >> >AppsnorGoogleaccounts work. Can anyone help me out? > > > >> > Thanks, > > >> > David > > > >> > -- > > >> > You received this message because you are subscribed to > > >> > theGoogleGroups "GoogleApp Engine" group. > > >> > To post to this group, send email togoogle-appeng...@googlegroups.com. > > >> > To unsubscribe from this group, send email > > >> > togoogle-appengine+unsubscr...@googlegroups.com. > > >> > For more options, visit this group > > >> > athttp://groups.google.com/group/google-appengine?hl=en. > > > > -- > > > You received this message because you are subscribed to theGoogleGroups > > > "GoogleApp Engine" group. > > > To post to this group, send email togoogle-appeng...@googlegroups.com. > > > To unsubscribe from this group, send email > > > togoogle-appengine+unsubscr...@googlegroups.com. > > > For more options, visit this group > > > athttp://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
