-
Task
-
Resolution: Fixed
-
Major
-
None
Google is going to shutdown its OpenID endpoint in April 2015.
As the base protocol appears to have nothing to do with OpenID, such a new feature probably needs to be implemented in a separate plugin, and OpenID plugin would have to be updated to direct users to the new plugin.
This needs to be done sooner because if an user fails to update their plugin by then, they'd lose the ability to login, which makes the update very difficult.
- duplicates
-
JENKINS-24974 OpenId with Google Apps stopped working in jenkins 1.565.3
-
- Resolved
-
[JENKINS-23431] Google is phasing out OpenID endpoint. Need to move on to G+ sign-in
kylecordes
added a comment - I saw that, and also this variation that works with BitBucket:
https://wiki.jenkins-ci.org/display/JENKINS/Bitbucket+OAuth+Plugin
kylecordes
added a comment - I saw that, and also this variation that works with BitBucket:
https://wiki.jenkins-ci.org/display/JENKINS/Bitbucket+OAuth+Plugin
recampbell says he has a working prototype of the Google+ auth which works. It requires you to create a Google+ Application, I think. Perhaps he can elaborate here.
Garbageyard
added a comment - We are using Jenkins Google Apps SSO (with OpenID) and since last few days, we started getting the following message while logging in into Jenkins: "Important notice: OpenID2 for Google accounts is going away on April 20, 2015". Switching to any other Access Control in Jenkins would really be a pain.
A fix from Jenkins to accommodate the changes made by Google will really be appreciated.
Garbageyard
added a comment - We are using Jenkins Google Apps SSO (with OpenID) and since last few days, we started getting the following message while logging in into Jenkins: "Important notice: OpenID2 for Google accounts is going away on April 20, 2015". Switching to any other Access Control in Jenkins would really be a pain.
A fix from Jenkins to accommodate the changes made by Google will really be appreciated. 
Ryan Campbell
added a comment - I created a google-login plugin (using oauth 2.0 apis) and released 1.0. It should be appearing in an update center near you over the next day or so.
I'll be so audacious as to resolve this issue since the new plugin appears to work ok.
Ryan Campbell
added a comment - I created a google-login plugin (using oauth 2.0 apis) and released 1.0. It should be appearing in an update center near you over the next day or so.
I'll be so audacious as to resolve this issue since the new plugin appears to work ok. 
Giovanni Toraldo (ClouDesire)
added a comment - It is ok that the plugin exists here https://wiki.jenkins-ci.org/display/JENKINS/Google+Login+Plugin but it's still not available in jenkins Available plugins section? The plugin page doesn't show any Plugin Information either.
Giovanni Toraldo (ClouDesire)
added a comment - It is ok that the plugin exists here https://wiki.jenkins-ci.org/display/JENKINS/Google+Login+Plugin but it's still not available in jenkins Available plugins section? The plugin page doesn't show any Plugin Information either. 
Mattias Amnefelt
added a comment - The plugin has now appeared as an installable plugin on our jenkins system and after install, I'm able to login using G+.
Many thanks to recampbell!
Mattias Amnefelt
added a comment - The plugin has now appeared as an installable plugin on our jenkins system and after install, I'm able to login using G+.
Many thanks to recampbell! 
Thanks a ton recampbell! Garbageyard
added a comment - It's working for me too! Thanks a ton recampbell! 
Joshua Spiewak
added a comment - Has anyone gotten the new Google Login Plugin working with the Matrix Authorization and the default authenticated pseudo-group?
My own account already had an entry, and another user who tried this weekend got an "Access Denied, <user> is missing the Overall/Read permission" even though that is checked for the authenticated psuedo-group.
Joshua Spiewak
added a comment - Has anyone gotten the new Google Login Plugin working with the Matrix Authorization and the default authenticated pseudo-group?
My own account already had an entry, and another user who tried this weekend got an "Access Denied, <user> is missing the Overall/Read permission" even though that is checked for the authenticated psuedo-group. Ryan Campbell
added a comment - This was fixed in head, and is now released as 1.1.
Please don't use this ticket as bug reports for the new plugin. Instead, please raise them in the google-login-plugin component in JIRA.
Ryan Campbell
added a comment - This was fixed in head, and is now released as 1.1.
Please don't use this ticket as bug reports for the new plugin. Instead, please raise them in the google-login-plugin component in JIRA. 
For those looking for something while waiting for this fix, the github oauth plugin has worked well for us.[1] You can restrict all access to a specific github organization using matrix-based security for a similar effect to using a google apps domain.
https://wiki.jenkins-ci.org/display/JENKINS/Github+OAuth+Plugin