This doesn't work in a proxied setup, where a web server such as Apache is only accepting https requests that a proxied to Jenkins. Jenkins is sending Google a http redirect URL which isn't registered in the OAuth client. Adding the http URL to the Google OAuth client doesn't work either since http isn't not accepted on the originating server.