If you are using Google Apps Login Enterprise version on a WordPress multisite installation, please get in touch with us. We have an extension plugin available that will allow you to override Group Role Rules on a sub-site basis.
Domain Control tab – multisite options
In a multisite installation, there are two extra settings on the Domain Control tab:
‘Add users to sub-sites if they are not yet members’ – if checked, this will always add all users as members to all sub-sites whenever the role mapping rules are processed for a user. In this case, the user will be added to each sub-site under the role determined by the rules you’ve set up. If not checked, the role will only be applied to the user in sub-sites of which they are already a member (which will likely be no sites for a new user, unless you have some other plugin to take care of sub-site membership assignment).
The point here is that under WordPress multisite, the user exists once globally (i.e. throughout the whole multisite), but can be added as a member to each sub-site independently of the others; and furthermore the user can have different roles in each sub-site. For example, the user could be a subscriber in sub-site 1, an admin of sub-site 2, and not a member at all of sub-site 3.
‘Demote existing Super Admins who do not have a Super Admin mapping above’ – if checked, the plugin will happily remove super admin privileges if the Domain Control rules determine that the user should have a role other than Super Admin. Leave checked (default) if you think that’s risky – i.e. it’s too easy to insert an extra rule that maps a super admin to something else. If it remains unchecked, you would have to manually demote any super admin that is no longer required on the multisite.
In WordPress multisite, super-admin is a different type of role to all the others – it applies globally, whereas the lesser roles can be assigned to any other member of any sub-site independently of the others.
Advanced Options – multisite Redirect URIs
In all versions of Google Apps Login, the Advanced Options tab contains an extra option related to multisite Redirect URIs. See here for more details.
