diff --git a/env b/env
index 5af29171..47d6c2ae 100644
--- a/env
+++ b/env
@@ -33,8 +33,10 @@ TWITTER_SECRET=
 #   For the callback URL use 'http://<your hostname:port>/auth/google/callback'
 #   Once registered copy the ID and Secret here
 #
+#   GOOGLE_OAUTH2_HD: (Optional) Limit sign-in to a particular Google Apps hosted domain. This can be simply string 'domain.com'
 GOOGLE_OAUTH2_ID=
 GOOGLE_OAUTH2_SECRET=
+GOOGLE_OAUTH2_HD=
 
 # LDAP Login Provider (optional)
 #