On Thu, Jan 14, 2016 at 9:48 AM, Stian Thorgersen <sthorger@redhat.com> wrote:

On 13 January 2016 at 22:09, Thomas Raehalme <thomas.raehalme@aitiofinland.com> wrote:

Hi!

Google doesn't accept wildcards in redirect URLs. This means I have to create a separate client for every realm in the Google console.

Any chance we could have a shared redirect URL across realms? Maybe as an option in the federation configuration? Then I could share the same Google config for each tenant.

-1 The client in Google should be per-realm as otherwise you're also sharing the config in Google (logo, contact email, etc) and also consent. Also, all logic here is per-realm so it would be a fair bit of special code to be able to support this.

I understand your points, but in a SaaS application with a realm per tenant, it would simplify operations a great deal. You'd probably be sharing the config in Google anyways.

For example, themes are also shared across realms so would it really be such a big problem considering the advantages? 

Best regards,
Thomas