Disable Google sign in II v2

Developers internet-identity
1

I’m using Internet Identity v2 and building my app (DooCoins) as a native app using CapacitorJS. Sign-in with Apple is working on iOS (not got as far as building it for Android yet), but not Google. Is it possible to specify which sign-in methods to provide?

2

I’d highly recommend against embedding II directly into your app itself.

Most OpenID providers (like Google) will not support it due to security concerns (your native app can e.g. intercept password input).

Also passkey authentication will likely not work either since most mobile platforms will isolate a user’s passkeys from embedded page views.

Instead, I’d recommend to create an in-between webpage that can be opened from your native app on the device’s browser, authenticate with II and then redirect back to your native app through e.g. a universal/deep link.

You can read more regarding this here: Security best practices: Identity and access management | Internet Computer

1 Like
3

thanks sea-snake. I’ll try this

4

This explains why some applications don’t even have internet ID as a sign in. The social media related dapps on ICP except for open chat don’t seem to have Internet ID as a sign in option. Just apple and google. I skip them as I avoiding google and apple sign in for greater privacy and therefore never explore certain dapps on ICP.

Inserting myself a little in a conversation not directed at me, but you still answered a question I was trying to understand so thank-you.

5

The required in-between page isn’t specific to II, it also applies to implementing OAuth authentication with Google on iOS for example.

As for why some dapps decide to implement with Google/Apple directly instead of through II, there could be various reasons:

  • II 2.0 with Google/Apple sign-in wasn’t around yet when the dapp implemented authentication.
  • They need the Google/Apple account information (which II doesn’t share with the dapp).
  • There’s (pre-existing) web2 infrastructure in place for authentication.

Overall, I’d recommend to contact dapp developers and ask them directly to get a clear answer and insight in their roadmaps.

Most developers I’ve spoken with have roadmaps with various priorities, authentication is often not on top of the list. Hopefully with II 2.0, we can enable developers to focus on their core project goals while enabling them to adopt users at scale.