What is SSO?
Single sign-on (SSO) allows your users to log in to the online academy using an external account. In this article, we will discuss what to configure in order to activate SSO integration with Google. For further information about SSO in general, please refer to this article.
In order to utilize SSO, users must already be added to the online academy. SSO does not create user accounts.
How do I set up Google SSO (OAuth)?
We will provide instructions on how to set up SSO. Below is a step-by-step guide to activate this integration. Please consult Google's support for the precise settings.
Step-by-step guide for creating credentials in Google
Go to the Credentials page in the Google Cloud Platform.
Click on ‘+ create credentials’ and select ‘OAuth client ID’.
If this is your first OAuth integration, you will be asked to fill out the Consent screen:
Select ‘Internal’ for the user type.
For App name, fill in the name of the environment within Rakoo.
For User support email, fill in an email address that users can contact for questions.
For App domain, only enter an Authorized domain. Click ‘Add domain’ under Authorized domain. Here you enter the main domain of your environment. (If the URL of your environment in Rakoo ends with 'rakoo.com', enter this as the main domain. If the URL of your environment ends with your own domain name, enter that as the main domain.)
For Developer contact information, you again enter an email address for users to contact.
Finally, choose ‘Save and continue’.
On the next page, you need to add scopes. Click ‘Add or remove scopes’ to select the following scopes:
auth/userinfo.email
/auth/userinfo.profile
openid
After selecting these scopes, choose ‘Save and continue’.
Next, you will see an overview page where you can check all the settings. After verifying the settings, proceed with creating the OAuth client ID.
Now you arrive on the Create OAuth client ID screen. Choose ‘Web application’ as the application type.
Thereafter, you provide a clear name for the application, such as the name of the online academy.
Finally, you will have the option to enter two URLs. Here, you only need to fill in the Authorized redirect URLs with the following URL: https://oauth2.hubper.co/oauth2/login/code
Click ‘Create’. You will now see the ‘client ID’ and ‘client secret’.
Step-by-step guide for creating the integration in the online academy
You can manage your integrations on the integrations page. You can find this page on the left side of the menu bar.
Next, you can select ‘Google (oauth2)’ at ‘Single sign-on’. This will take you to the settings page.
Here, you can select ‘Add’.
Thereafter, you can enter the credentials obtained from Google.
UserInfo URL: https://www.googleapis.com/oauth2/v3/userinfo
Access Token URL: https://www.googleapis.com/oauth2/v4/token
Authorization URL: http://accounts.google.com/o/oauth2/v2/auth
At ‘Integration status’, you can indicate whether the integration is activated or not.
The ‘Login with “button" option allows you to decide whether a button should also be displayed in the login screen. Is this option disabled? Then, users can only log in through an external method via SSO (e.g., intranet).
Save the changes to activate the integration.
Are you having trouble with the setup? Please contact support.