Thank you so much for the quick response! I will share this with the developer of the Google Apps Login Plugin and see if there is a change they can make on their end.
In the meantime, If we do add the code to our wp-config.php as you suggested, what firewall protection is that disabling? Is it only user escalation, or is it more than that? Basically, what all does NFW_DISABLE_PRVESC2 do? I don’t want to open up new vulnerabilities without understanding the consequences.
Thanks again!