{"action":"created","issue":{"url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/48","labels_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/48/labels{/name}","comments_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/48/comments","events_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/48/events","html_url":"https://github.com/pingidentity/mod_auth_openidc/issues/48","id":55062358,"number":48,"title":"Incorrect Google domain example claim hd:<your domain>","user":{"login":"markwormgoor","id":2221270,"avatar_url":"https://avatars.githubusercontent.com/u/2221270?v=3","gravatar_id":"","url":"https://api.github.com/users/markwormgoor","html_url":"https://github.com/markwormgoor","followers_url":"https://api.github.com/users/markwormgoor/followers","following_url":"https://api.github.com/users/markwormgoor/following{/other_user}","gists_url":"https://api.github.com/users/markwormgoor/gists{/gist_id}","starred_url":"https://api.github.com/users/markwormgoor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/markwormgoor/subscriptions","organizations_url":"https://api.github.com/users/markwormgoor/orgs","repos_url":"https://api.github.com/users/markwormgoor/repos","events_url":"https://api.github.com/users/markwormgoor/events{/privacy}","received_events_url":"https://api.github.com/users/markwormgoor/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-01-21T19:06:30Z","updated_at":"2015-01-21T19:27:03Z","closed_at":"2015-01-21T19:17:05Z","body":"The examples given in the documentation for using Google Apps domain accounts are incorrect, which took me quite a bit of googling/searching to correct. The example states the following is required:\r\n  OIDCScope \"openid profile\"\r\n  Require claim hd:&lt;your-domain&gt;\r\n\r\nHowever, the hd claim is only returned if you ask for e-mail according too Google's documentation: https://developers.google.com/+/api/openidconnect/getOpenIdConnect. Hence, the correct example would be:\r\n  OIDCScope \"openid email\"\r\n  Require claim hd:&lt;your-domain&gt;\r\n\r\nNote: I don't think profile is required for Google - or adds any value."},"comment":{"url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/comments/70904144","html_url":"https://github.com/pingidentity/mod_auth_openidc/issues/48#issuecomment-70904144","issue_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/48","id":70904144,"user":{"login":"zandbelt","id":2339879,"avatar_url":"https://avatars.githubusercontent.com/u/2339879?v=3","gravatar_id":"","url":"https://api.github.com/users/zandbelt","html_url":"https://github.com/zandbelt","followers_url":"https://api.github.com/users/zandbelt/followers","following_url":"https://api.github.com/users/zandbelt/following{/other_user}","gists_url":"https://api.github.com/users/zandbelt/gists{/gist_id}","starred_url":"https://api.github.com/users/zandbelt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zandbelt/subscriptions","organizations_url":"https://api.github.com/users/zandbelt/orgs","repos_url":"https://api.github.com/users/zandbelt/repos","events_url":"https://api.github.com/users/zandbelt/events{/privacy}","received_events_url":"https://api.github.com/users/zandbelt/received_events","type":"User","site_admin":false},"created_at":"2015-01-21T19:27:03Z","updated_at":"2015-01-21T19:27:03Z","body":"Insgelijks :+1:\r\n"}}