Approving Study League’s Google sign-in

For your school’s Google Workspace administrator. Students can tap Continue with Google on studyleague.org to sign in with their school Google account. If your domain limits third-party apps, Google blocks it until Study League is approved. Students can always sign in with a username and password instead.

What Study League asks Google for

App: Study League, https://studyleague.org (UIL A+ Academics practice, grades 2–8)
OAuth client ID: Loading…
Scopes: openid and profile only: sign-in and the student’s name. No email, Drive, Classroom, Calendar or contacts, and no calls to Google on the student’s behalf after sign-in.
What it keeps: Google’s account number for the student and a username made from their first name and last initial (“ava.m”). The full name, profile photo link and school domain Google sends are discarded at once, never stored or logged. Google tokens are never stored.
Privacy: studyleague.org/privacy and studyleague.org/student-privacy. Study League signs the Texas Student Data Privacy Agreement (TX-NDPA) unmodified.

Approve it in the Admin console

Sign in to admin.google.com as an administrator.
Go to Menu → Security → Access and data control → API controls.
Under app access, choose Manage App Access, then Configure new app.
Search for the OAuth client ID above and select Study League.
Choose the organizational units for your students, or the whole domain.
Set access to Limited (enough: Study League uses no restricted Google services) or Trusted, then finish.

Students designated as under 18 (Google Workspace for Education) can’t use an app until it is configured, unless your domain lets them use apps that request only the basic information needed for Sign in with Google. Study League asks for less than that, so either way works.

Questions

Email andarostudio@hey.com. Study League is run by Andaro Studio.