Google sign-in is switched on once the OAuth client is set up (VZ-2181).
For people outside @vizbl.com, with a password and an authenticator app.