Overview
If your company uses Google Workplace for your email and identity management this walkthrough will guide you on how to configure Google OAuth to enable Single Sign-on (SSO) though Google.
Assumptions
You are a workplace admin on your domain
Creating a Cloud Project
Navigate to the Google Cloud Console: https://console.cloud.google.com/
Click on the Project Selector in the top navigation
In the pop-up modal click on the New Project button
On the New Project screen enter the following:
Project Name: SiteRise SSO
Organization: Select the appropriate organization for your workplace
Location: Select the appropriate location for your workplace
Enable OAuth Consent Screen
In the scenario that your consent screen has not already been created please follow theses steps before proceeding
Navigate to API > OAuth
Click on the Configure Consent button
On the OAuth consent screen under User Type select Internal
For the App Information fill in the information as follows:
App name: SiteRise
User Support Email: Select an available option
App Logo: Use the following logo - Siterise_favicon-02.png
App Domain: Not applicable
Authorized domain: siterise.app
Developer Support Contact: [email protected]
On the Scopes page click on Add or Remove Scopes
In the Update selected scopes select the following scopes
/auth/userinfo.email
/auth/userinfo.profile
openid
Click save and review the summary
Create OAuth Credentials
With your project successfully created navigate to APIs > Credentials
On the Credentials screen click on + Create Credentials and select OAuth Client ID
On the Create OAuth client ID screen fill in the following information
Application Type: Web Application
Name: SiteRise
Authorized JavaScript origins: https://{your-app-domain}.siterise.app, https://{your-app-domain}-api.siterise.app
Authorized redirect URIs: https://{your-app-domain}-api.siterise.app/login/oauth2/code/oidc
Once you save you will be presented with the client credentials. Export the JSON and share with your SiteRise team
