Looking for help with publishing an Oauth app

[hurdle-matt]

I've configured an oauth app for simple SSO with google accounts. That's all it does, the standard sign-in with google button.

When I go to the configuration about what scopes it's configured for this is what I see (note that sensitive and restricted are empty)

From everything I read and have seen this should exclude me from the more cumbersome validation methods. (I really don't want to make a youtube video explaining that I'm using the Oauth stuff for sso...)

However I keep getting this pop up when I hit the publish app button

Anyone have any ideas on what is going on here or if there are things outside of just the scopes that determine if you need the more intense validation?

Thanks (had to stick a label on none of them really fit, let me know if I'm in the wrong place but really not sure where else I would go)

[hurdle-matt · Accepted solution]

For all future finders of this.

I went ahead and continued despite this warning. It then identified the part that needed "extra validation" was because I had uploaded a logo. So I continued with submitting for approval.

The next gotcha was when you click on the domain validation tab it says it is no longer required. But once I submitted I got an email shortly after saying I needed to confirm it. I followed a couple links and landed on the google search admin tool and it auto verified it for me, likely because I bought the domain from google.