Skip to main content

Google Setup

Set up Google as your OIDC identity provider for Cloud ex Machina.

1. Create an OAuth client​

  1. Open the Google Cloud Console.
  2. Select or create a project for your organization.
  3. Open APIs & Services → Credentials.
  4. Select Create Credentials → OAuth client ID.
  5. Select Web application as the application type.
  6. Name the client Cloud ex Machina.

If the console asks for the OAuth consent screen, configure it first. Add cloudexmachina.io to its Authorized domains.

2. Set the redirect URIs​

  1. Open Organization Settings → SSO in Cloud ex Machina.
  2. Select Google as the identity provider.
  3. Copy the redirect URI that the tab shows. It is the URI of the host you are on.
  4. In the OAuth client, add both redirect URIs below under Authorized redirect URIs.

Register a redirect URI for each host your team signs in on. For the organization acme:

https://app.cloudexmachina.io/auth/callback/google
https://acme.app.cloudexmachina.io/auth/callback/google

Replace acme with your organization ID. If the tab shows another host than app.cloudexmachina.io, use that host.

3. Collect the values​

  • Client ID — shown after you create the OAuth client.
  • Client secret — shown after you create the OAuth client.
  • OIDC discovery endpoint — https://accounts.google.com/.well-known/openid-configuration. This value is the same for every Google organization.

4. Save in Cloud ex Machina​

  1. Return to Organization Settings → SSO.
  2. Select Google as the identity provider.
  3. Paste the client ID, client secret, and OIDC discovery endpoint.
  4. Set Require SSO if your team must sign in with Google only.
  5. Select Save SSO configuration.

On your next sign-in, enter your work email on the login page. Then select Continue with Google. The button shows the display name of your configuration.