Issue with redundant SSO permissions prompts; workflow for Apps Marketplace install
<p>I've been working over the past month with a Google support rep, who's responsible for validating SSO workflow/integration for Google App Marketplace submissions. We have everything setup, configured, and tested successfully -- with the exception of one mysterious issue. My Google rep recommended I post our issue here, as both he and I are unsure how to resolve it.</p>

<p>When you install our app (<a href="https://chrome.google.com/webstore/detail/floruit-labs-pond/bhalfbanckpdhnkjnknlhcoiohcigocm?hl=en" rel="nofollow">https://chrome.google.com/webstore/detail/floruit-labs-pond/bhalfbanckpdhnkjnknlhcoiohcigocm?hl=en</a>), the workflow prompts you more than once to allow permissions. Which of course is a deal-breaker for getting published in the Marketplace.</p>

<p>At the risk of over sharing, I'm attaching background materials for context: <a href="http://i.stack.imgur.com/fKzCG.png" rel="nofollow">screenshots of our install workflow</a></p>

<p>Also, copied below is the snippet of code embedded in our login page -- that adds the Google login button functionality:</p>

<p><div class="snippet" data-lang="js" data-hide="false">
<div class="snippet-code">
<pre class="snippet-code-html lang-html prettyprint-override"><code>&lt;!---include Google Apps SSO scripts ---&gt;
&lt;meta name="google-signin-client_id" content="743379733841-bt8rpjio0qs44kei4vlk5av888fbp0fs.apps.googleusercontent.com"&gt;
 &lt;script src="https://apis.google.com/js/platform.js" async defer&gt;

&lt;!---include Google Apps SSO button ---&gt;
          &lt;div class="g-signin2" data-theme="dark" data-width="250" data-height="52" data-longtitle="true" align="left" style="margin-top:50px;"&gt;&lt;/div&gt;
    &lt;script&gt;
      function onSignIn(googleUser) {
        // Useful data for your client-side scripts:
        var profile = googleUser.getBasicProfile();
        console.log("ID: " + profile.getId()); // Don't send this directly to your server!
        console.log("Name: " + profile.getName());
        console.log("Image URL: " + profile.getImageUrl());
        console.log("Email: " + profile.getEmail());

        // The ID token you need to pass to your backend:
        var id_token = googleUser.getAuthResponse().id_token;
        console.log("ID Token: " + id_token);
      };
        function renderButton() {
      gapi.signin2.render('my-signin2', {
        'scope': 'profile email https://www.googleapis.com/auth/drive',
        'longtitle': true,
        'theme': 'dark',
        'onsuccess': onSuccess,
        'onfailure': onFailure
      });
    }
    &lt;/script&gt;</code></pre>
</div>
</div>
</p>