Creating Google accounts through API forcing users to verify sign in city

Question

Using Google's Directory API to create users, I'm now running into an issue where the user is asked what city they usually sign in from.

This is a problem because the webserver used to create the account via the API is in a different location than the users are logging in from for the first time. This hasn't happened before and it's suddenly happening now (no code change).

Has anyone ran into this, and is there a way to mitigate it?

For the record, I'm using a PHP implementation, if it matters.

Edit: Clarification that the webserver in another location is the webserver used to create the Google account via the API.

Answer 1

See Google's FAQ on suspicious logins . I'd recommend setting a strong initial password for these users that is 8+ characters in length and contains upper and lowercase as well as numbers or punctuation.