relevant django settings.py for social auth stuff

settings.py

from social_core.pipeline import DEFAULT_AUTH_PIPELINE


SECRET_KEY = <secret key here>  # make sure secret key is not something autogenerated, otherwise your sessions will get invalidated!  Boo!

SOCIAL_AUTH_GOOGLE_OAUTH2_WHITELISTED_DOMAINS = ['<your_domain_here>.com']  # so not everyone with a google account can log in to intranet site
SOCIAL_AUTH_GOOGLE_OAUTH2_AUTH_EXTRA_ARGUMENTS = {'prompt': 'select_account'}
SOCIAL_AUTH_GOOGLE_OAUTH2_KEY = <your key here>
SOCIAL_AUTH_GOOGLE_OAUTH2_SECRET = <your secret here>
SOCIAL_AUTH_PIPELINE = list(DEFAULT_AUTH_PIPELINE)
# SOCIAL_AUTH_SESSION_EXPIRATION=False
SOCIAL_AUTH_FIELDS_STORED_IN_SESSION = ['state', 'session_state']
SOCIAL_AUTH_REDIRECT_IS_HTTPS = True
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
SECURE_SSL_HOST = True
SECURE_SSL_REDIRECT = True
SESSION_COOKIE_SECURE = False
CSRF_COOKIE_SECURE = True