> cc would be reachable via 50.jfoo.ubar.cc.borg.google.com. I've implemented similar at my current job, as that sort of naming is very convenient. http://www.

> cc would be reachable via 50.jfoo.ubar.cc.borg.google.com. I've implemented similar at my current job, as that sort of naming is very convenient. http://www.boxever.com/using-google-apps-openid-connect-with-apache http://www.boxever.com/using-google-apps-openid-connect-with... has a sketch of how to do this with Apache as a reverse proxy with Google Auth, though we're using a PAC file now going to a HTTPS forward proxy to avoid limitations of SSL wildcard certs.