Solus for Google Workspace

Google data Solus requestsName, email address, profile picture. Nothing else.

Drive, Gmail, Classroom accessNone for students. Teachers can opt in to Classroom.

Software to installNone. Solus runs in Chrome.

Required from ITApprove one app ID, allow one domain.

Required: approve Solus for students

Google blocks users designated under 18 from signing in to any third-party app until an administrator configures it. Until you do, students see a Google "Access blocked" screen when they choose Continue with Google. Teachers are not affected.

Solus OAuth client ID

1085193592721-7g7338lters4eihnd8alnjh2mn18d3s4.apps.googleusercontent.com

In the Google Admin console, go to Security › Access and data control › API controls and open Manage Third-Party App Access.
Click Configure new app, paste the client ID above, and select Solus.
Choose the organizational units or groups that should use Solus (students, teachers, or the whole domain).
Set access to Limited. Solus only uses Google sign-in, and Limited is all sign-in needs. You can choose Trusted instead, but it is not required.
Click Finish. The change usually takes effect within minutes. Google says it can take up to 24 hours.

Already allowing basic sign-in? If your API controls settings have "Allow users to access third-party apps that only request basic info needed for Sign in with Google" turned on, students can already sign in, because Solus requests only that basic info. We still recommend configuring Solus by client ID so it appears in your app inventory.

To test it, sign in to write.soluseditor.com with a student test account and choose Continue with Google. You should land on the Solus home screen.

Required: allow these domains

Add these to your web filter (GoGuardian, Securly, Lightspeed, Linewize and others) and firewall allowlists. Everything is HTTPS on port 443. Some filters need both the bare domain and the wildcard entry.

Domain	Used for	Needed by
`soluseditor.com` `*.soluseditor.com`	The editor, teacher dashboard, verifier, and this site	Everyone
`exbiipbqkqedyazubwam.supabase.co`	Sign-in, class data, encrypted submissions (Supabase, our database host)	Everyone
`accounts.google.com`	Sign in with Google	Everyone (already allowed in a Google domain)
`challenges.cloudflare.com`	Bot check on the account-creation form	New email/password sign-ups only
`cdn.jsdelivr.net`	Code libraries for the teacher dashboard and institution portal	Teachers, school admins
`fonts.googleapis.com` `fonts.gstatic.com`	Web fonts	Optional; falls back to system fonts
`unpkg.com`	Screenshot attached to in-app feedback	Optional

Solus encrypts and signs documents in the browser. If you inspect TLS, exclude *.soluseditor.com and *.supabase.co where you can. An intercepting proxy that rewrites those requests shows up as failed submissions, not as a network error.

Optional: Google Classroom for teachers

Teachers can import a Classroom course's roster, post Solus assignments to Classroom, and send grades back. This uses a second, teacher-only app with read access to courses and rosters and write access to coursework and grades. Students never see it or grant it anything. Most domains let staff use it with no change. If yours restricts unconfigured apps for staff too, configure this client ID for your teacher OU only, with access set to Trusted:

Solus for Teachers client ID

1085193592721-dlvav1ju6qesjhr6h8cin1p5c004rf8i.apps.googleusercontent.com

Optional: put Solus on student Chromebooks

Solus is a website, so this is only for convenience. To give students a Solus icon on the shelf:

In the Admin console, go to Devices › Chrome › Apps & extensions › Users & browsers and select the student organizational unit.
Click the + button and choose Add by URL. Enter https://write.soluseditor.com.
Set the installation policy to Force install + pin to ChromeOS taskbar.

Optional: keep extensions out of Solus pages

Solus records how a document was written. Chrome extensions that insert text, such as AI writing assistants and auto-typers, can interfere with that record. Chrome can stop every extension from reading or changing pages on a given site. Add *://*.soluseditor.com to the Runtime blocked hosts list in the Additional settings panel of Apps & extensions › Users & browsers for your student OU.

Check this first. The setting also applies to extensions you rely on, such as screen readers, read-aloud tools, and classroom monitoring. Test it with one class before rolling it out, and keep any accessibility extension a student's plan requires. Solus works the same whether or not you turn this on.

What you don't need to do

No Chrome extension or desktop software to install or update
No Drive, Gmail, Calendar or Classroom permissions for students. Solus never requests them
No new student passwords. Students use their school Google account
No inbound ports, VPN, or on-premises server

Privacy and paperwork

Privacy Policy and Terms of Service
FERPA compliance: Solus acts as a school official under your direct control
Security & trust: student documents are encrypted on the device, and Solus servers store only ciphertext
Sub-processors: every service that handles any data
Data Processing Addendum: a signed DPA at no cost for every institution. How to request one
Google data use: Solus's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Solus never uses Google data for advertising and never sells it.

If a student still can't sign in

"Access blocked" from Google: the approval above hasn't reached that student's organizational unit yet. Check that the OU is included, and allow time for it to take effect.
The page won't load: a filter is blocking one of the domains above. exbiipbqkqedyazubwam.supabase.co is the one most often missed.
Signed in, but no class: the student needs their teacher's class join code. Classes are created in the teacher dashboard.

Email soluseditor@gmail.com and we'll get on a call with your team.

How Solus works with your Google environment.