Skip to main content
How do I set up SSO with Google Cloud?

This guide details how to configure Google Cloud to enable your users to login using their corporate Google account.

Updated over a week ago

Prerequisites

  1. A Google Cloud organisation you have permission to create OAuth clients.

  2. You must have an account able to log in as an Administrator

Setup

  1. Log into the Google Cloud Console.

  2. On the Welcome page choose the APIs & Services button under Quick access.

  3. Choose Credentials from the left-hand side of the page.

  4. Choose Create Credentials -> OAuth client ID.
    For the Application type, choose Web application.

  5. Enter a descriptive name in the Name field.

  6. Obtain your Platform URL by logging into the web app, and copying the first two parts of the URL from your address bar. For example, your address bar may show:
    https://www.url.com/eu1/#/notifications

    This makes your Platform URL:
    https://www.url.com/eu1

  7. Under Authorized JavaScript origins, click Add URI and enter the Platform URL from the previous step.
    Under Authorized redirect URIs, click Add URI and enter the Platform URL in the form of [Platform URL]/ssoCallback (e.g. https://www.url.com/eu1/ssoCallback )

  8. Click Create.

  9. Copy the values given for Your Client ID and Your Client Secret, they will be needed to set up in our web app.

  10. Log into the web app as an Administrator

  11. Select Global Settings then the Change button next to Single Sign-On (SSO)

  12. Check Enable Single Sign-On and enter the details you note from the Google Cloud portal. The OpenID Connect metadata URL field should be set to https://accounts.google.com/.well-known/openid-configuration


After saving your settings you should now be able to create a new user with an SSO account.

It is recommended to create a new test account within the web app that matches an e-mail address that is attached to an account within your Google Cloud users.

Did this answer your question?