Google OAuth domain restriction

[prince11jose]

Describe the bug
Can domain restriction be done for google oauth enterprise accounts, to allow only specific domain emails should be allowed to login.

[evereq]

Hi @prince11jose do you mean we need to have somewhere in Admin UI a list of domains for emails that are allowed to log in? Will that be enough?

[prince11jose]

Hi @evereq, it need not be in the admin UI but in the env-vars where we set up Google OAuth credentials. If you can mention an array, allowed_domains: ['example.com','example1.com']. Then it can be secured within the domain instead of allowing any gmail id to login.