As an administrator, you might want to prevent users from signing in to Google services using any accounts other than those you provided them with.
For example, you might not want users within your corporate network to use their personal Gmail accounts or a managed Google Account from another domain.
This option will only work if you have SSL interception enabled and well configured on your Proxy!
¶ Allow access only from specific domains
To allow users to access Google services using an account only from a list of specified Google Workspace domains:
- On left menu, click on WAF / ACLs and then Headers Rules
- Prevent users from inserting their own headers
2.1 Click New Rule
2.2 Set a Rule Name
2.3 On HTTP Header list select X-GoogApps-Allowed-Domains
2.4 On Type select Delect client header
2.5 Click Add
- Add the HTTP header X-GoogApps-Allowed-Domains
3.1 Click New Rule
3.2 Set a Rule Name
3.3 On HTTP Header list select X-GoogApps-Allowed-Domains
3.4 On Type select Add client header
3.5 On Values add the list of domain separated by a comma, eg: articatech.com,artica.fr
3.6 Click Add
- Click Apply to compile the rules
¶ Final Result
Now when you try logon on a Google Servie using you personal account or an account outside of allowed domains, you will get this message.
