Prerequisites
A Google Cloud organisation you have permission to create OAuth clients.
You must have an account able to log in as an Administrator
Setup
Log into the Google Cloud Console.
On the Welcome page choose the APIs & Services button under Quick access.
Choose Credentials from the left-hand side of the page.
Choose Create Credentials -> OAuth client ID.
For the Application type, choose Web application.
Enter a descriptive name in the Name field.
Obtain your Platform URL by logging into the web app, and copying the first two parts of the URL from your address bar. For example, your address bar may show:
https://www.url.com/eu1/#/notificationsThis makes your Platform URL:
https://www.url.com/eu1
Under Authorized JavaScript origins, click Add URI and enter the Platform URL from the previous step.
Under Authorized redirect URIs, click Add URI and enter the Platform URL in the form of [Platform URL]/ssoCallback (e.g. https://www.url.com/eu1/ssoCallback )
Click Create.
Copy the values given for Your Client ID and Your Client Secret, they will be needed to set up in our web app.
Log into the web app as an Administrator
Select Global Settings then the Change button next to Single Sign-On (SSO)
Check Enable Single Sign-On and enter the details you note from the Google Cloud portal. The OpenID Connect metadata URL field should be set to https://accounts.google.com/.well-known/openid-configuration
After saving your settings you should now be able to create a new user with an SSO account.
It is recommended to create a new test account within the web app that matches an e-mail address that is attached to an account within your Google Cloud users.