Trac Google Apps Authentication Plugin


This plugin allows a Trac site to authenticate users against a hosted Google Apps domain. It requires and uses the AccountManagerPlugin.

Key features:

  • Allows users to log in to Trac with their Google Apps username and password.
  • Allows restriction of userbase for Trac instance based on membership in Google Apps group.
  • Assigns Trac groups to users based on their Google Apps groups.
  • Allows basic user info listing via Trac Account Manager.
  • Pre-populates Trac database with email of every user so that email notifications can be sent to users who have never logged in to Trac, and so the ticket "Assign To" drop-down is fully populated when using the config [ticket] setting restrict_owner = true. Simply view the Admin user listing page to populate the database.
  • Encrypts stored Google Apps password to protect against casual observers on filesystem and via web, but this is not nearly as secure as using OpenID.

Note: Google's suite of cloud-hosted apps is formerly known as Google Apps and rebranded as G Suite.

Bugs/Feature Requests

Existing bugs and feature requests for GoogleAppsAuthPlugin are here.

If you have any issues, create a new ticket.


This plugin can be found here.


This plugin can be found here.


After checkout or download, run the following command to install this plugin:

easy_install TracGoogleAppsAuthPlugin


Your trac.ini could look as follows to use this plugin:

password_store = GoogleAppsPasswordStore

acct_mgr.api.accountmanager = enabled
acct_mgr.web_ui.loginmodule = enabled
createtank.trac.googleauth.googleauthplugin.googleappspasswordstore = enabled
trac.web.auth.loginmodule = disabled

domain =
group_access = trac_users
admin_username = sysadmin
admin_secret = TOP_S3CRET


Author: riggs
Maintainer: David A. Riggs

Last modified 7 years ago Last modified on Aug 28, 2017, 6:10:47 PM