This authentication module lets users log in to Hub with the email addresses and passwords they manage in Google.
When you enable Google authentication in Hub:
Your users log in to Hub with the credentials they use for their Google accounts.
Your Hub users have fewer accounts and passwords to remember.
New users with Google accounts can create their own accounts in Hub.
Enable Google Authentication
To allow users with existing Google accounts to log in to Hub, enable the Google authentication module.
This procedure takes place in three steps:
Generate a Redirect URI in Hub. When you create an authentication module for Google, Hub generates a redirect URI to use with this service. This URI identifies the source of each login request to Google.
The icon stored in the Button Image setting is added to the login dialog window. Users can click this icon to authenticate with their Google accounts.
Displays the name of the application or service that is enabled for third-party authentication in Hub.
Stores the name of the authentication module. Use this setting to distinguish this module from other authentication modules in the Auth Modules list.
Displays the image used for the button that a user clicks to log in to Hub with a Google account.
Authorized redirect URI
Displays the redirect URI that is used to register the connection to Hub in Google.
Displays the URL of the server to which Hub sends a login request when a user logs in with a Google account. The information displayed below this field helps you configure the authentication module.
Stores the identifier Google uses to validate a login request. You generate this value in the Google API Manager when you configure the authorization settings for a web application and enter an authorized redirect URI.
Stores the secret or password used to validate the client ID. You generate this value in the Google API Manager together with the client ID.
The following options are located at the bottom of the page. Use these settings to manage Hub account creation and group membership, and to reduce the loss of processing resources consumed by idle connections.
Enables creation of Hub accounts for unregistered users who log in with an account that is stored in the connected authorization service. Hub uses the email address to determine whether the user has an existing account.
Restricts the creation of user accounts to users with an email address from the specified domain. This option is only active when you enable the Create Users option.
Adds users to a group when they log in with an account that is stored in the connected authorization service. You can select one or more groups. New users that auto-join a group inherit all of the permissions assigned to this group. We recommend that you add users to at least one group. Otherwise, a new user is only granted the permissions that are currently assigned to the All Users group.
Sets the period of time to wait to establish a connection to the authorization service. The default setting is 5000 milliseconds (5 seconds).
Sets the period of time to wait to read and retrieve user profile data from the authorization service. The default setting is 5000 milliseconds (5 seconds).
Links to the Audit Events page in Hub. There, you can view a list of changes that were applied to this authentication module.