Thanks, but lets leave as is for now. Entity has recently attempted google oauth2 on production server ... incorrectly configured ... they are now seeking a combo ... some math students login via Google and all others continue to use LDAP. It's gonna be circus for students. :| Don't think one can get oauth2 working on an internal server as google can't reach it.
'spirit of sharing', Ken