Enabling Google Sign-in Authentication

Google Sign-in Authentication

The Google Sign-in Authentication is a useful function that allows your users to sign in to CloudOffix with their Google account. This is particularly helpful if your organization uses Google Workforce, and you want the employees within your organization to connect to CloudOffix with their Google Accounts. The integration of the Google sign-in function requires configuration both on Google and on CloudOffix

First Step: Setup in Google


  1. Create a new Google API project and enable the Google Calendar API. First, you should go to the Google API Console and log into the Google account.

Remark

If this is your first time visiting this page, you should choose your country and accept the Terms of Service (ToS) to continue.


  1. Next, choose an existing project or create a new one for OAuth configuration and credential storage. Click "New Project" to get started.



  1. Click “CREATE” button 

Remark

Name your API Project something helpful, like "Google Sign-in Authentication" to make it easy to remember what it's for.














Second Step: OAuth Consent Screen Settings


  1. Now that your project is ready, let's set up OAuth. On the left menu, click "OAuth consent" and choose the User Type.

Remark

Personal Gmail Accounts are only allowed to be External User Type, which means Google may require an approval, or for Scopes to be added on. However, using a Google WorkSpace account allows for Internal User Type to be used.













  1. First, fill in the App Name and User Support Email fields on the OAuth Consent Screen


  1. Enter the App domain and Developer Contact info. Then, click Save and Continue

  2. You can skip Scopes page. Click Save and Continue (You can always turn back and configure Scopes later)


  1. For External testing mode, you'll need to add the email addresses you configured earlier under "Test users". Click "Add Users" and then "Save and Continue" to proceed. Finally, you'll see a summary of your app registration.


  1. Scroll down to the bottom and click "Back to Dashboard". We've finished setting up OAuth consent. 










Third Step: Publishing the App


All Set! Next Step is clicking PUBLISH APP button










Fourth Step: Creating Credentials


The Client ID and Client Secret are essential for connecting Google Calendar to CloudOffix. Please, copy these for later. This completes your setup in the Google Console.


  1. To create credentials, start by navigating to the left menu and clicking "Credentials". Next, select "Create Credentials" and choose "OAuth client ID". Google provides a helpful guide to assist you with this process.

 

  1. During OAuth Client ID creation, specify the application type. Select "Website application" as it best describes your CloudOffix integration. Additionally, give your client a clear and descriptive name in the "Name" field. In this case, "My CloudOffix Database" is a good option.



  1. Under "Authorized redirect URIs", click the "+ Add URI" button. Enter the company's full CloudOffix URL, followed by "/google_account/authentication" (this helps connect your CloudOffix to Google). And then, click "Create".




  1. Once you see the Client ID, copy it for a later use.

















Fifth Step: Setup in CloudOffix


  1. The next step happens within your CloudOffix database. Once you've located the Client ID, open CloudOffix and navigate to Settings. From there, Settings ‣ General Settings ‣ Integrations ‣ Google Authentication. To enable the Google Authentication integration, check the box next to it.


  1. Almost there! Copy and paste the Client ID from the credentials page into their respective field below the Google Authentication checkbox. Clicking Save will ensure your changes are applied




Sixth and Last Step: Login to CloudOffix with Google Account


Finally, go to the login page within your CloudOffix database. There, you will see the Google button under the “Or Login With” header.
Now, your customers can effortlessly login as a portal user by simply using their existing Google Accounts.