Configuration: Google Social Authentication Policy

How to Configure a Social Authentication Policy using Google

Step 1: Set up a Google Account Project with Credentials

Note:

The Google Account must be a Google Workspace Account.

1. Open your Google Console and login to the Workspace account:  https://console.cloud.google.com/

2. If account doesn’t have one already, Create Project.  If there are projects created, select the one you wish to use for this configuration.

   

3. From the Dashboard, select your Project >> APIs & Services

   

4. Select Credentials >> Create Credentials

   

   1. For credential type choose “OAuth client ID”

      

   2. OPTIONAL STEP: If your organization has not previously configured an Oauth consent screen, you will be required to do this now.

   3. Application type: Select Web Application

   4. Name: We recommend using a name that will be easily associated with RapidIdentity

      

   5. Authorized JavaScript origins URI = <tenant IDP URL with protocol>

      

   6. Authorized redirect URIs = <tenant IDP URL with protocol>/idp/socialCallback?n=googleplus

      

   7. Then click, the Create button and the client id and secret values will be displayed. You will need these in the next steps. You will also be able to access the later if needed.

The configuration required in Google is now complete. Please log into your RapidIdentity Administrator Account for the next steps.

Step 2: Configuring the Social Authentication Policy in RI

1. Login to your RapidIdentity Portal as Tenant Admin.

2. Browse to Configuration >> Policies >> Authentication >> Authentication Policies

   

3. Create (or edit a policy) for Social Authentication in Authentication Methods with the following settings:

   1. Enabled: Check

   2. Enable Google: Check

   3. Client ID = <the client id from Google credential setup above>

   4. Client Secret = <the client secret from Google credential setup above>

      

4. Ensure that the Policy is enabled and has appropriate criteria set for users before clicking the Save button in the bottom bar.

5. At this point, the Users who are associated with the policy are now able to authenticate with their Google Credentials.