Restrict Google account logins to a specified Apps domain
How can I let users log in to my web app with their Google account, and verify that they logged in from a certain Google Apps domain? Does the hd parameter to the Google Authorization service ensure that only the selected domain can be used to login? Or can I get the logged in user's email and verify that it ends with "@domain.com"? This doesn't seem like such a good idea. After login I also need to access the users' Google Contacts, which according to the documentation requires AuthSub proxy authentication . Have a look at the OpenID docs others suggested. In brief, you need to redirect the