Google Workspace Setup for Limudi
If your school uses Google Workspace for Education, your IT administrator may need to approve Limudi before teachers and students can sign in with their school Google accounts. This is a one-time setup.
Why is this needed?
Google Workspace for Education protects student accounts by blocking third-party apps until an administrator explicitly allows them. Without approval, students may see a message like "This app is blocked" or "Access denied" when trying to sign in.
Teachers often have looser restrictions and may be able to sign in without this step.
Step-by-step setup
1. Open the Google Admin Console
Go to admin.google.com and sign in with your administrator account.
2. Navigate to App Access Control
- In the left sidebar, go to Security > Access and data control > API controls
- Click Manage Third-Party App Access
3. Add Limudi as a trusted app
- Click Add app > OAuth App Name Or Client ID
- Search for Limudi by name, or enter Limudi's OAuth Client ID:
814616153316-10t88pgc49886cv8i7otihlhdlv1ohfo.apps.googleusercontent.com - Select Limudi from the results
- Click Select
4. Set the access level
- Choose which organizational units (OUs) should have access. To allow all staff and students, select the top-level OU. To limit access, select specific OUs (e.g., your student OU and staff OU separately)
- Set the access level to Trusted: this allows Limudi to request the permissions it needs for Google Classroom integration
- Click Configure and then Finish
5. Verify it works
Wait a few minutes for the policy to propagate, then ask a student to sign in at your school's Limudi URL using the Sign in with Google button. They should see the Google consent screen and be able to proceed.
What permissions does Limudi request?
When signing in, Limudi asks for:
| Permission | Why |
|---|---|
| Basic profile (name, email, photo) | To create and identify the user's account |
| Google Classroom courses (read-only) | So teachers can import their classes |
| Classroom roster (read-only) | So teachers can sync their student lists |
| Student email addresses | To match students to their Limudi accounts |
| Own coursework | So students' Limudi submissions can be marked as turned in within Google Classroom |
Teachers who connect Google Classroom from Integrations in the account menu are also asked for permission to create and grade assignments in Google Classroom.
Troubleshooting
Students see "This app is blocked" The app has not been approved for the student's organizational unit. Follow steps 3 and 4 above and make sure the student OU is included.
Students see "Access denied" or a generic error The approval may not have propagated yet. Wait 5 to 10 minutes and try again. If it persists, double-check that the correct OAuth Client ID was used in step 3.
Teachers can sign in but students cannot This is the most common scenario. Teacher OUs typically have fewer restrictions. Add the student OU to the trusted list in step 4.
Everything worked before but stopped An admin may have changed the third-party app policy. Re-check the settings in Security > API controls > Third-Party App Access.
Need help?
Contact your Limudi representative with your school's Google Workspace domain and we can help verify the configuration.