Google 403 app_not_configured_for_user Error
Creation date: 6/11/2025 11:27 AM
Updated: 6/11/2025 11:59 AM
Google will display this error during the SAML single sign-on (SSO) process if the user account signing in doesn't belong to the Google Workspace organization, or if the SSO app isn't turned on for the user signing in.
Cause 1: User Doesn't Match the Google Domain/Organization
When the user doesn't belong to the Google Workspace organization, the most common cause is using personal or other account (Example: @gmail.com) to try to sign into our organization's SSO (Example: @esucc.org). This can happen at times if the browser profile is signed into multiple Google accounts at the same time, which many people routinely do.
In Chrome, you may see the accounts signed in currently by clicking the avatar (your picture or initial) in the upper right corner of the Chrome window:
To resolve this cause, make sure that the account signed in includes your school/organization's Google account for you. Try signing out temporarily from any other accounts and retrying the single sign-on. Another test would be to try an incognito window in the browser to sign in and see if that sign in is successful.
If these steps don't resolve the problem, ask your Google Workspace administrator to check the configuration of your Nebraska Cloud app.
Cause 2: NebraskaCloud app in Google Not Enabled for All Users
Ask your district's Google Workspace administrator to check the configuration of the Nebraska Cloud app in the Google Admin Console. In the Admin Console, navigate to Apps -> Web and mobile apps. Click to on the name of the NebraskaCloud SSO app to open it's configuration. The User Access section of the app should say "ON for everyone". If it doesn't, expand the User Access section and turn the switch on for all users. This may take some time to take affect.
After this change, retry the single sign-on authentication.
If Authentication still does not work
Please reply to your ticket with this information or contact the Nebraska Cloud help desk at help@esucc.org if you don't have a ticket open with us already. We will work with you to perform more troubleshooting.
DataImage97.png
DataImage41.png
DataImage55.png