Google Apps OpenID 网址
问题:
我的组织 ExampleFooBar 使用 Google Apps。在我们的网站上我想要 启用 OpenID 单点登录(如 StackOverflow),但只允许 @examplefoobar.com 用于登录的电子邮件地址。我应该使用什么 OpenID url 用于 Google Apps 电子邮件地址?
根据在 drupal 中包含 OpenId 的评论,域
http:// /www.google.com/profiles/<用户名>
可用于普通 Google 帐户,但这不适用于 Google Apps 帐户。Google 还提供了网址
https://www.google.com/accounts/o8/id
,但使用该网址将允许任何找到我们网站登录页面的 Google 用户登录,因为登录页面接受任何 Google 帐户名称。
我可以使用什么 Google 网址来确保只有 @examplefoobar.com 电子邮件地址才能登录?
有关 Google Apps OpenID 的 Google 文档位于 http://code.google.com/ googleapps/domain/sso/openid_reference_implementation.html,但毫无帮助。
Problem:
My organisation, ExampleFooBar, uses Google Apps. On our website I want
to enable OpenID Single Sign-In (like StackOverflow), but only allow
@examplefoobar.com email addresses to sign in. What OpenID url should I
use for a Google Apps email address?
As per comments on Include OpenId in drupal, the domain
http://www.google.com/profiles/<username>
can be used for normal Google accounts, but this doesn't work for Google Apps accounts.Google also provides the url
https://www.google.com/accounts/o8/id
but using that would allow any google user who found our website's login page to sign in, as the sign-in page accepts any google account name.
What Google URL can I use to ensure only @examplefoobar.com email addresses can sign in?
Google documentation for Google Apps OpenID is at http://code.google.com/googleapps/domain/sso/openid_reference_implementation.html, but is incredibly unhelpful.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
作者:aaronsnoswell:
OpenID 网址
google.com/accounts/o8/site-xrds?hd=examplefoobar.com
会将电子邮件条目限制为@examplefoobar.com
。此外,我必须从 Google Apps 管理员页面启用 OpenID 单点登录。希望这对某人有帮助!http://jeremiahlee.com /blog/2009/09/28/how-to-setup-openid-with-google-apps/
Google Apps(适用于企业)用于 ASP.NET 的 OpenID 登录内联网站点
By aaronsnoswell:
The OpenID url
google.com/accounts/o8/site-xrds?hd=examplefoobar.com
will restrict email entries to@examplefoobar.com
. Additionally, I had to enable OpenID Single Sign in from the Google Apps administrator page. Hope this helps someone!http://jeremiahlee.com/blog/2009/09/28/how-to-setup-openid-with-google-apps/
Google Apps (for business) OpenID login for ASP.NET intranet site
OpenID 网址 https://google.com/accounts/o8/site- xrds?hd=yourdomain.com 将限制条目@yourdomain.com。您还需要从 Google Apps 管理页面启用 OpenID 单点登录,网址为 http:// /www.google.com/a/cpanel/yourdomain.com/SetupIdp
您还应该在您的网站 yourdomain.com/openid 上添加 X-XRDS-Location 标头,格式为:
X-XRDS-Location: <一href="https://www.google.com/accounts/o8/site-xrds?ns=2&hd=yourdomain.com" rel="nofollow">https://www.google.com/accounts/o8 /site-xrds?ns=2&hd=yourdomain.com
The OpenID url https://google.com/accounts/o8/site-xrds?hd=yourdomain.com will restrict entries to @yourdomain.com. You also need to enable OpenID Single Sign In from the Google Apps admin page at http://www.google.com/a/cpanel/yourdomain.com/SetupIdp
You should also add an X-XRDS-Location header on your website at yourdomain.com/openid in the format:
X-XRDS-Location: https://www.google.com/accounts/o8/site-xrds?ns=2&hd=yourdomain.com