Is login restricted to the Google Apps domain I use to set up the plugin?
No, once you set up the plugin, any WordPress accounts whose email address corresponds to any Google account, whether on a different Google Apps domain or even a personal gmail.com account, will be able to use ‘Login with Google’ to easily connect to your WordPress site.
However, our premium and enterprise plugins have features that greatly simplify your WordPress user management if your WordPress users are mostly on the same Google Apps domain(s). They can automatically create WordPress accounts for your Google Apps users.
We have multiple domains in Google Apps – can we allow users to authenticate from any of them?
Yes, if you have a few different domains – e.g. aliases – then you can specify all of them in the premium or enterprise versions of Google Apps Login.
When you configure the plugin, you will be asked to enter your domain name in a box called ‘My Google Apps Domain’. Simply enter a space-separated list of all your domains, like this:
domain1.com domain2.com domain3.com
You will probably also need to turn off the setting in the Domain Control tab labelled “Force Google login to use accounts on my domain (saves user having to select from multiple Google accounts)” – otherwise only users in the first-listed domain will be able to login.
Please also note that the Enterprise version of Google Apps Login will only be able to obtain Google Group information from the domain on which you originally configured the plugin (i.e. created your Service Account) – but members of those Google Groups can be in any of your domains for the role mapping to still work.
If you have a particularly complicated Google Apps setup, please feel free to get in touch with details so we can advise how you might best configure the plugin.
Does the plugin work on Multisite WordPress?
It is written, tested, and secure for multisite WordPress, both for subdirectories and subdomains, and must be activated network-wide for security reasons.
There are many different possible configurations of multisite WordPress, however, so you must test carefully if you have any other plugins or special setup.
In a multisite setup, you will see an extra option in Settings -> Google Apps Login, named ‘Use sub-site specific callback from Google’. This setting will need to be ON if you are using any domain mapping plugin, and extra Redirect URIs will need to be registered in Google Cloud Console.
Read details in your personalized configuration instructions (linked from the plugin’s Settings page), or see our generic instructions here.
If you are using the Enterprise version of Google Apps Login in a multisite setup, please get in touch with us if you would like understand more about roles and how they can be assigned to users in each subsite.
Can I force a logout from Google whenever users logout from WordPress?
There is a feature in the Premium and Enterprise versions of Google Apps Login labelled ‘Automatically logout of Google when logging out of WordPress’ – it’s in the Advanced settings tab.
When checked, users will be redirected to the Google logout page automatically as soon as they logout of WordPress.
Users can always choose to interrupt this process of course. They need to be happy to logout of Google, but this feature should prevent them from forgetting to do so after using WordPress.
For more information, please see our blog post on the feature.
