Coworking:Google Integration Preferences

Back to Coworking:General Setup

Introduction

Openbravo allows to log-in by using a Google Account.

There are two ways to use Google Account Authentication service:

• link each Openbravo user to a Google Account by using the Google Account Association process
• configure Openbravo to allow that any user with a Google account can login by using that Google account.
  • In this case Openbravo users are not linked to a Google account,
    therefore Openbravo creates new Openbravo users for those google accounts linked to a default Role by using Google Integration Defaults

It is important to remark that it is also possible to diseable Google Account Authentication by adding a property type preference named "Enable Google button in Login Page" set to "N".

Google Integration Defaults

Openbravo allows to select a default role to be linked to the new Openbravo users which will be automatically created by Openbravo as they want to log in by using a google account.

Fiels to note:

• Default Role, it is recommended to select the most restrictive role in the client, that means a role which only allows to log in. Later on client administrator can define additional roles for that new user.
• New user active checkbox allows that the new user remains active by default or not.
• Default checkbox allows to pick just one role in case of several roles configured.

The outcome of this process is shown in the image below:

Server Configuration

Apache Tomcat configuration

This configuration is only required if your made a Custom Installation

URIEncoding: This specifies the character encoding used to decode the URI bytes, after %xx decoding the URL. If not specified, ISO-8859-1 will be used.

The default encoding for parameters in Apache Tomcat is ISO-8859-1 and that leads to this error:

ERROR org.openid4java.consumer.ConsumerManager - Verification failed for: https://www.google.com/accounts/o8/id?id=SomeToken reason: null
ERROR org.openbravo.service.integration.google.GoogleAuthServlet - Error processing return of Google Auth Service:null

The solution is to set the encoding to UTF-8 in your connectors (depending on which one you're using)

• http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html
• http://tomcat.apache.org/tomcat-6.0-doc/config/http.html

Example (server.xml):

<Connector URIEncoding="UTF-8" connectionTimeout="20000" port="8080" protocol="HTTP/1.1" redirectPort="8443"/>

More information at openid4java forum post

Full list of Google Integration Preferences window fields and their descriptions is available in the Google Integration Preferences Screen Reference.

Back to Coworking:General Setup