What is SSO?
With Single Sign-On (SSO), your users can log in to the online academy using an external account. Read more about SSO in general here.
In this article, we explain what needs to be configured to activate this integration with Google.
To use SSO, users must already be added to the online academy. SSO does not create user accounts.
Read more here about adding users to your online academy.
How do I set up Google SSO (OAuth)?
Here we will explain how to configure SSO with Google.
Please consult Google support for the exact settings.
Step-by-step guide for creating credentials in Google
Go to the "Credentials" page in the Google Cloud Platform.
Click on "+ Create credentials" and then select "OAuth client ID".
If this is your first OAuth integration, you will be prompted to fill in the "Consent screen":
Select “Internal” as the user type.
For “App name”, enter the name of the environment within Rakoo.
In the “User support email” field, provide an email address that users can contact with any questions.
For “App domain”, only fill in an “Authorized domain”. Under “Authorized domain”, click “Add domain”. Here, enter the main domain of your environment.
If your Rakoo environment URL ends with “rakoo.com”, this is the main domain you should enter. If the URL ends with your own domain name, then provide that main domain instead.In the “Developer contact information” field, once again enter an email address where users can reach out.
Finally, click “Save and continue”.
On the next page, you need to add scopes. Click “Add or remove scopes” to select the following scopes:
_/auth/userinfo.email
_/auth/userinfo.profile
openid
After selecting these scopes, again choose “Save and continue”.
You will then see an overview page where you can review all settings. After this, you can proceed to create the OAuth client ID.
Now you’ll reach the “Create OAuth client ID” screen. For Application type, select “Web application”.
Next, give the application a clear name—this could, for example, be the name of the online academy.
Finally, you’ll have the option to enter two URLs. You only need to fill in the “Authorized redirect URLs”. The URL to enter here is:
https://oauth2.rakoo.com/oauth2/login/codeClick “Create”. You will now be shown a “client ID” and a “client secret”.
Step-by-step guide for creating the integration in the online academy
Go to “Integrations” via the menu on the left.
Under “Single Sign-On,” choose “GitHub (oauth2).”
Click “Add.”
Enter the information obtained from Google
UserInfoUrl: https://www.googleapis.com/oauth2/v3/userinfo
Access token URL: https://www.googleapis.com/oauth2/v4/token
AuthorizationUrl: http://accounts.google.com/o/oauth2/v2/authUnder “Integration status”, you can specify whether the integration is activated or not.
With “Login with button”, you can indicate whether a button should be displayed on the login screen. If this option is disabled, users can only log in via an external SSO method (e.g. an intranet).
Save the changes to activate the integration.
Are you having trouble with the setup? Please contact support.