How To Set Up Your Own Google App (OpenID Connect)
Step 2
At the top of the page, click Select a Project, then New Project, if you have not already created a Project.
Step 3
- For Project name, enter your organization’s name.
- For Organization, select your organization.
- For Location, select your organization.
Click Create
Step 4
In the left pane, click on APIs & Services, then OAuth consent screen.
Step 5
- For User Type, choose Internal.
- Click Create.
Step 6
- For Application type, choose Internal.
- For Application name, enter your organization’s name.
- For Support email, enter your email address.
Note: For the Google Enterprise Provider, please ensure that the application type is Internal. This restricts login to your domain only, whereas “Public” will allow any Google user to log in.
Step 7
- For Scope, add email, profile, and openid.
- For Authorized domains, add:
logonlabs.com - Enter the remaining fields for your organization as needed (please note that these can be changed later).
- Click Save.
Step 8
In the left pane, click on Credentials.
Step 9
Click Create credentials, and then select OAuth client ID.
Step 10
- For Application type, select Web application.
- For Name, enter your app name. We recommend entering your organization name.
- For Authorized JavaScript origins, enter:
https://api.logonlabs.com - For Authorized redirect URIs, enter:
https://api.logonlabs.com/callback - Click Create.
Step 11
In the dialog that appears, take note of the Client ID and Client Secret.
Step 12
LogonLabs Setup:
- Go to logonlabs.com
- Click Sign In and authenticate (or Sign Up make a new account and authenticate).
- Navigate to Default Rules (or Domain Rules and open/create a domain module).
- Click on the Google button under Enterprise Identity Providers.
- Click Add.
- Choose OpenID Connect for the protocol.
- Enter a name.
- Enter a description (optional).
- In the Login URL field, enter:
https://accounts.google.com/o/oauth2/v2/auth - In the Token URL field, enter:
https://oauth2.googleapis.com/token - Enter the Client ID from the Google OAuth setup steps above.
- Enter the Client Secret from the Google OAuth setup steps above.
- Click Add
- Enable Google by clicking the new entry in the Google Identity Providers list.
