An update on identity verification and login challenges

Back in May, we communicated the upcoming launch of login challenges--a new feature aimed at keeping domain accounts safe from hijackers, even if they have attained a user’s username and password. The login challenges feature was rolled out slowly over the past few weeks, and impacted a large number of domains this week. The initial intent was not to expose this feature to users with 2-Step Verification enabled and domains using SSO. While the challenge feature is not enabled for domains using SSO, many users in these domains did see a prompt to enter their phone number as a means of verifying their identity in the future. This understandably caused confusion and led to escalations to admins. Upon hearing of this confusion, the launch of the interstitial prompt was temporarily rolled back for all domains until SSO domains can be fully excluded, at which point it will be relaunched. We are passionate about keeping our users’ information safe and secure, so we do plan to enable login challenges for domains using SSO later this year. Furthermore, enabling 2-Step Verification provides the highest level of protection for users, so we encourage domains to take advantage of this offering to protect their data. For more information:

https://support.google.com/a/answer/6002699

whatsnew.googleapps.com
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Identity verification to keep your account safe

In the coming weeks we’re introducing a feature to keep your account safe from hijackers, even if they have your username and password. Now when we detect a suspicious login, users will be prompted to verify their identity by entering their phone number. Users who have not set up their phone number will see a place to do so in the coming weeks. Note that users can skip entering their phone number but may be asked to add their phone number again at a later date. Google will use that phone number to verify their identity upon the next suspicious login. Once a user verifies their identity the alert is dismissed. Note: the paragraph below was edited on June 12 to clarify impact to users logging in through SSO. Users with 2-Step Verification enabled will not be affected by this launch and will not see the interstitial to set up their phone number. Users logging in through SSO may see the interstitial to set up their phone number, but will not be challenged to verify their identity at this time. This feature will be slowly rolling out to Rapid and Scheduled release domains in the coming weeks. Release Track:Rapid release and Scheduled release. For more information:https://support.google.com/a/answer/6002699

whatsnew.googleapps.com

Get these product update alerts by email

Subscribe to the RSS feed of these updates

New sign-in page for Google Apps customers

The new sign-in page that was announced last November will be rolling out over the next four weeks starting today. With this change, the sign-in page for all Google Apps customers will be updated to be consistent across all Google Apps services. In other words, the sign-in page for Gmail will now be identical to the sign-in page for Google Calendar, Google Drive, or any other Google Apps service. This change will improve security and make it easier for users to switch between accounts. This means a few things for your organization:

The Google Apps sign-in page can no longer be personalized with colors and custom logos. It will now look the same across all Google sign-in pages
Users will have to log in with their full email address (example: joe@company.com)
For SSO domains with a network mask, users will be presented with the new Google sign-in page when they log in from outside the SSO network mask. This change does not affect SSO domains without a network mask.

Editions included: 
Google Apps for Business, Education, and Government

For more information:
https://support.google.com/a/answer/4421331

whatsnew.googleapps.com
Get these product update alerts by email
Subscribe to the RSS feed of these updates