title: Prompt user to enter password - Google OpenID Connect
body: <p>We are trying to use Google's OpenID Connect for a business web app but are concerned that the user will leave the app open and an unauthorized user will sign-in because the user is still signed into Google so OpenID Connect just let's them right in.</p>
  
  <p><s>We've tried using <code>max_auth_age=0</code> parameter.</s> This has been replaced by <code>max_age</code> in OpenID Connect.</p>
  
  <p>I do see that Google App's control panel at admin.google.com does usually re-prompt the user for a password while any other login won't. But looking at the authorization URL I don't see anything that would be triggering this to happen.</p>
  
  <p>Here is our current authorization URL:
  <code>https://accounts.google.com/o/oauth2/auth?prompt=select_account&amp;scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+https%3A%2F%2Fwww....com%2Fauth%2Fuserinfo.profile&amp;state=%2F&amp;redirect_uri=https://www.foo.com/callback&amp;response_type=token&amp;client_id=...</code></p>
  
  <p>Perhaps if we added a certain scope that could trigger Google to go into high security mode, but I haven't found anything so far.</p>