Skip to content

Google Workspace SSO Setup Guide

Providing documentation to your users on how to set up SSO with Google is important for a smooth integration process. Below is an example guide of what this documentation could look like.

  1. Begin by navigating to your Google Cloud Platform Console.

  2. From the projects list, select a project or create a new one.

  3. On the left side menu, select APIs & services.

  4. If you have never created an OAuth consent screen (what your users will see after clicking Sign in with Google), you will be prompted to fill that out first. Fill in the information for your application.

  5. Click Create Credentials, then select OAuth client ID.

    Creating an OAuth client

  6. In the Application Type dropdown select Web Application. Then, name the OAuth client.

  7. Under Authorized Redirect URIs, enter the redirect URI for your app (e.g., https://myapp.com/callback). See here for more details on the callback URL that you should provide to your users.

    Setting Redirect URI

  8. Click Create.

  9. Copy the Client ID and Client Secret and paste them into {your application}.

    Copy Client ID and Client Secret

  10. Click on Audience followed by Make internal. This will restrict sign-in to users within your organization.

    Set Audience to Internal

  11. Enter the following URLs into {your application}:

    • Authorize URL: https://accounts.google.com/o/oauth2/v2/auth
    • Token URL: https://oauth2.googleapis.com/token
    • Userinfo URL: https://openidconnect.googleapis.com/v1/userinfo
  12. Click Save in {your application}.