Google Single Sign-On Login Troubleshooting (403 Error)

Note:

If you are encountering a 403 error while authenticating through Cisco AnyConnect (VPN) or Cisco Webex, please see our dedicated guide on Resolving Google 403 Error During Cisco AnyConnect VPN or Webex Login.

Several WFU services use G Suite login for authentication, including Canvas, Workday, Microsoft Office, and others. Your @wfu.edu Google account must be used to login to these services. If you are attempting to sign on to a WFU service with a non-Wake Forest Google account, your authentication attempt will fail. You may see an error message similar to this:

Google 403 error page displaying app_not_configured_for_user message

The recommended method of accessing most of these services is via the Google App Launcher.

Separate browser profiles

Because Google's Account Chooser can leak authentication tokens between personal and @wfu.edu accounts across web apps (Canvas, Workday, Google Workspace), it is recommended to use separate browser profiles for your WFU account and other accounts. This helps prevent authenticating with the wrong account.

How to set up browser profiles:

Google App Launcher

While logged into your WFU Google Mail via a web browser, click on the Google App Launcher and scroll down (depending on the computer's screen resolution/size you may have to scroll further to the bottom).

The list of WFU Google Apps that are available will expand, and your WFU service will be listed at the bottom.

Google App Launcher grid icon located in top navigation bar

Alternative: Sign in with incognito or private window

Opening an Incognito (Chrome) or Private Browsing (Edge/Firefox/Safari) window starts a completely isolated session that ignores existing browser cookies, cached data, and active logins. Because personal @gmail.com credentials are not present in a private session, Google Single Sign-On cannot default to a personal account—forcing it to prompt for a fresh @wfu.edu login. This is not a good long-term solution, but best if you need to access something quickly or infrequently.

Browser private browsing or incognito window prompt

If you are able to sign into the service in Incognito or in Private browsing mode, but the issue persists in normal viewing mode, then you should clear your browser's cache.

Already signed in with multiple accounts?

If you have previously added your @wfu.edu account to your personal Google session using Google's Account Switcher:

When you encounter the 403 error page, click your Profile Avatar in the upper-right corner of the web page (not the browser toolbar).
Click your @wfu.edu email address from the dropdown list to manually force the page to reload under your university session.
Long-term fix: To avoid needing to manually switch accounts every day, follow the separate browser profiles solution above to set up a dedicated WFU browser profile.

Was this answer helpful? Yes No