> ## Documentation Index
> Fetch the complete documentation index at: https://docs.goguardian.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify User Logins with GoGuardian

> Enable Verified Login in GoGuardian Org Management to validate user identities during Google Chrome sign-in.

Verified Login is a security setting in GoGuardian Org Management that reduces security risks by validating user identities during sign-in on Google Chrome. It requires GoGuardian extensions 4.1.237 or later installed in Chrome.

Please note that Verified Login will be available starting in August 2026.

## Explore How Verified Login Works

Verified Login enhances security by requiring users to sign in to Google Chrome and checking their user identities. IT administrators can enable Verified Login in one of the following ways:

* **With domain-wide delegation**: When domain-wide delegation is enabled in the Google Admin console, identities are checked when users sign in to Google Chrome. If their identity is verified, they can access the internet
* **Without domain-wide delegation**: Without domain-wide delegation enabled, users sign in to Chrome and then must sign in to GoGuardian with Google, Clever, or ClassLink single sign-on (SSO) to verify their identities

For users on managed Chromebooks or Macs, domain-wide delegation allows for non-interactive verified authentication. For Windows devices, domain-wide delegation allows for this type of authentication in Chrome when users are signing into the Chrome browser.

Please note that non-interactive verified authentication is not supported for extensions in Microsoft Edge or for extensions in Chrome when users are not signing into Chrome.

## Enable Verified Login in Org Management

1. Sign in to [Org Management](http://manage.goguardian.com/) as a Super User.
2. Click **Product Settings** > **General**.
3. Toggle on **Verified Login**.
4. Determine your environment's need for domain-wide delegation. If you're enabling it, please open a new tab and follow the instructions in the next section.
5. Select "**I've enabled domain-wide delegation in the Google Admin console.**" (recommended)
6. Click **Enable Verified Login**.

## Configure Domain-Wide Delegation in Google Admin

1. Sign in to [Google Admin](http://admin.google.com/) as an administrator.
2. In the navigation menu, visit **Security** > **Access and data control** > **API controls**.
3. Click [Manage domain-wide delegation](https://admin.google.com/u/2/ac/owl/domainwidedelegation?rapt=AEjHL4Mc4asFua7n8502tbdoH7Eny6BdPNByYXWAz3-WT4T3EykLwBoD77y8VWGONRkHpn7FqjdHUewqMlcckrRS50kRP5URDzuOCVGP29AC28LmXWKi_ow).
4. Click **Add new**.

<img src="https://mintcdn.com/goguardian/N8XVHnJ1pY4_hDnG/images/screenshots/verified-login/step-01.png?fit=max&auto=format&n=N8XVHnJ1pY4_hDnG&q=85&s=8cafd8bb94337a6c30e79775a9481b5c" alt="Google Admin console Domain-wide Delegation panel under Security > API Controls, with &#x22;Add new&#x22; and &#x22;Download client info&#x22; links" data-og-width="2048" width="2048" data-og-height="283" height="283" data-path="images/screenshots/verified-login/step-01.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/goguardian/N8XVHnJ1pY4_hDnG/images/screenshots/verified-login/step-01.png?w=280&fit=max&auto=format&n=N8XVHnJ1pY4_hDnG&q=85&s=9e822c66bceea4b31c4ba277f28f2986 280w, https://mintcdn.com/goguardian/N8XVHnJ1pY4_hDnG/images/screenshots/verified-login/step-01.png?w=560&fit=max&auto=format&n=N8XVHnJ1pY4_hDnG&q=85&s=31f15e3e063f69ec41ff67a0749e28a7 560w, https://mintcdn.com/goguardian/N8XVHnJ1pY4_hDnG/images/screenshots/verified-login/step-01.png?w=840&fit=max&auto=format&n=N8XVHnJ1pY4_hDnG&q=85&s=9982867ddf9072bf842510fe41219c2a 840w, https://mintcdn.com/goguardian/N8XVHnJ1pY4_hDnG/images/screenshots/verified-login/step-01.png?w=1100&fit=max&auto=format&n=N8XVHnJ1pY4_hDnG&q=85&s=37911f309336c4ed1f8a87cdbb88a18f 1100w, https://mintcdn.com/goguardian/N8XVHnJ1pY4_hDnG/images/screenshots/verified-login/step-01.png?w=1650&fit=max&auto=format&n=N8XVHnJ1pY4_hDnG&q=85&s=8243e2b9be45d3d7efa978bbad2c805d 1650w, https://mintcdn.com/goguardian/N8XVHnJ1pY4_hDnG/images/screenshots/verified-login/step-01.png?w=2500&fit=max&auto=format&n=N8XVHnJ1pY4_hDnG&q=85&s=fb6c10a764162646dd1ec4ff7b946218 2500w" />

5. Paste the following for **Client ID**:

   `1022294148666-ecrhf33feoo7cp7vtccfh616ol6cq1m5.apps.googleusercontent.com`

6. Paste each of the following for **OAuth scopes**:

   `https://www.googleapis.com/auth/userinfo.email`

   `https://www.googleapis.com/auth/userinfo.profile`

7. Click **Authorize**.

<img src="https://mintcdn.com/goguardian/N8XVHnJ1pY4_hDnG/images/screenshots/verified-login/step-02.png?fit=max&auto=format&n=N8XVHnJ1pY4_hDnG&q=85&s=333a77b96b9749833f9de871f5244961" alt="Google Admin console &#x22;Add a new client ID&#x22; form with the Client ID and two OAuth scopes fields filled in" width="910" height="820" data-path="images/screenshots/verified-login/step-02.png" />

## FAQ

**What authentication methods does Verified Login support?**

Verified Login supports Google, Clever, and ClassLink SSO.

**Does Verified Login affect filtering or Beacon alerts?**

No. Verified Login controls sign-in behavior only. Filtering policies, GoGuardian Beacon alert configurations, and other product settings are not affected.

**What environments are supported?**

Domain-wide delegation is not available for GoGuardian extensions prior to version 4.1.237 in the following configurations as well as GoGuardian Gateway and The GoGuardian App:

* Windows: Microsoft Edge environments
* Windows: Chrome environments where user identity comes from Active Directory or Microsoft Entra ID rather than browser sign-in

**What happens to users in unsupported environments when Verified Login is enabled?**

Users who cannot authenticate through Google OAuth will see a standard sign-in prompt and must sign in to access the internet. Please confirm all users have access to a supported SSO method (Google, Clever, or ClassLink) before enabling the setting.
