--- title: Google SSO for Docker slug: /deployment/security/google/docker --- # Google SSO for Docker To enable security for the Docker deployment, follow the next steps: ## 1. Create an .env file Create an `openmetadata_google.env` file and add the following contents as an example. Use the information generated when setting up the account in the previous steps. ### 1.1 Before 0.12.1 ```bash # OpenMetadata Server Authentication Configuration AUTHORIZER_CLASS_NAME=org.openmetadata.service.security.DefaultAuthorizer AUTHORIZER_REQUEST_FILTER=org.openmetadata.service.security.JwtFilter AUTHORIZER_ADMIN_PRINCIPALS=[admin] # Your `name` from name@domain.com AUTHORIZER_INGESTION_PRINCIPALS=[ingestion-bot] AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain AUTHENTICATION_PROVIDER=google AUTHENTICATION_PUBLIC_KEYS=[https://www.googleapis.com/oauth2/v3/certs] AUTHENTICATION_AUTHORITY=https://accounts.google.com AUTHENTICATION_CLIENT_ID={Client ID} # Update with your Google SSO Client ID AUTHENTICATION_CALLBACK_URL=http://localhost:8585/callback # Airflow Configuration AIRFLOW_AUTH_PROVIDER=google OM_AUTH_AIRFLOW_GOOGLE_SECRET_KEY_PATH=/path/to/secret.json ``` ### 1.2 After 0.12.1 ```bash # OpenMetadata Server Authentication Configuration AUTHORIZER_CLASS_NAME=org.openmetadata.service.security.DefaultAuthorizer AUTHORIZER_REQUEST_FILTER=org.openmetadata.service.security.JwtFilter AUTHORIZER_ADMIN_PRINCIPALS=[admin] # Your `name` from name@domain.com AUTHORIZER_INGESTION_PRINCIPALS=[ingestion-bot] AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain AUTHENTICATION_PROVIDER=google AUTHENTICATION_PUBLIC_KEYS=[https://www.googleapis.com/oauth2/v3/certs] AUTHENTICATION_AUTHORITY=https://accounts.google.com AUTHENTICATION_CLIENT_ID={Client ID} # Update with your Google SSO Client ID AUTHENTICATION_CALLBACK_URL=http://localhost:8585/callback ``` **Note:** Follow [this](/how-to-guides/feature-configurations/bots) guide to configure the `ingestion-bot` credentials for ingesting data from Airflow. ### 2. Start Docker ```commandline docker compose --env-file ~/openmetadata_google.env up -d ```