Is there a way to set up Discourse so that users of the organisation’s G-Suite have automatic basic access? Or at least can create their own account. And that if the G-suite membership is revoked so is the access to Discourse?

Yes this is quite straightforward: Set your site to require registration to see content using - login required Set up google authentication Add your gsuite domain to the email domains whitelist which will require registrants to use an email address from that domain You can whitelist more than one domain if necessary.

I think you can achieve the first part by using a group that is set up to add members who register with a specified domain. [Screen Shot 2020-07-19 at 3.29.34 PM]

[image] kgreed: And that if the G-suite membership is revoced so is the access to Discourse? i don’t think this will be possible.

I did this in the past using the steps outlined by @Stephen plus one extra: disable login by email address and password. (I can’t remember the exact setting name off the top of my head). We also changed a setting to help deactivate accounts more quickly when someone leaves the org (not perfect, but gets close): [image] What to do when someone leaves the company? Support We let email bounces automatically deactivate the account:

It’s called enable local logins. It’s not strictly necessary if you’re using a domain whitelist and gives you some fallback when Google has a hiccup. The Google login button also disappears with certain Adblock and content blockers. I’ve worked with a couple of communities who started with that setting disabled until either of the above caused complaints.

[image] IAmGav: i don’t think this will be possible. If you’re only using Google logins then access is terminated when the Google session ends. You can reduce the default session length to narrow the window but all users will be asked to re-authenticate more frequently.

[image] Stephen: It’s not strictly necessary if you’re using a domain whitelist The reason we disabled it was to achieve this (emphasis mine): [image] Stephen: If you’re only using Google logins then access is terminated when the Google session ends.

Set up so that only G-Suite account holders have access?

Product Support

IAmGav (Gavin Perch) July 19, 2020, 10:43pm 5

i don’t think this will be possible.

Topic		Replies	Views
Google Auth to only invited users Product Support	4	1018	November 18, 2020
Improve Google Login with Multiple Accounts Feature	14	2446	February 23, 2018
Enable group sync from Google Workplace Integrations how-to , platforms	7	1929	April 11, 2025
Can't setup Google login for Discourse SSO google-login	6	1132	January 15, 2024
Enable Google Login to accept logins from more than one hosted domain (aka GSuite domain) Feature pr-welcome	1	1944	April 1, 2020

Set up so that only G-Suite account holders have access?

Related topics