title: Jenkins restrict access to only Google Apps Domain users using OpenID Authentication
body: <p>Using the <a href="https://wiki.jenkins-ci.org/display/JENKINS/OpenID+Plugin" rel="nofollow noreferrer">Jenkins OpenID plugin</a> I'm able to configure Jenkins to use my Google Apps OpenID as a provider. Anonymous users are still able to access that application (they have read access only), but I want to have it so that users are forced to login using the Google App domain or they are denied access.</p>
  
  <p>I'm currently using the Jenkins Authorization setting of "Logged in users can do anything", I've tried using the "Matrix based authentication" and denying anonymous users, assuming logged in users would still have permissions, is there a special group value I can use for "logged in users" in matrix based authentication?</p>
  
  <p>It seems like "Matrix-based security" will only work for specific users when using Google Apps OpenID (I don't believe Google apps for domains has support for <a href="https://dev.launchpad.net/OpenIDTeams" rel="nofollow noreferrer">OpenIDTeam extension</a></p>
  
  <p><img src="https://i.stack.imgur.com/M92pO.png" alt="enter image description here"></p>