OpenMetadata/openmetadata-docs/content/v1.7.x/security-collate/google/index.md

title	slug	collate
Google SSO	/security/google	true

Google SSO

Follow the sections in this guide to set up Google SSO.

{% note %}

Security requirements for your production environment:

• DELETE the admin default account shipped by OM in case you had Basic Authentication enabled before configuring the authentication with Google SSO.
• UPDATE the Private / Public keys used for the JWT Tokens. The keys we provide by default are aimed only for quickstart and testing purposes. They should NEVER be used in a production installation.

{% /note %}

Create Server Credentials

Step 1: Create the Account

• Go to Create Google Cloud Account
• Click on Create Project

{% image src="/images/v1.7/deployment/security/google/create-account.png" alt="create-account" caption="Create a New Account" /%}

Step 2: Create a New Project

Enter the Project name. Enter the parent organization or folder in the Location box. That resource will be the hierarchical parent of the new project. Click Create. {% image src="/images/v1.7/deployment/security/google/create-project.png" alt="create-project" caption="Create a New Project" /%}

Step 3: How to Configure OAuth Consent

• Select the project you created above and click on APIs & Services on the left-side panel. {% image src="/images/v1.7/deployment/security/google/configure-oauth-consent.png" alt="configure-oauth-consent" /%}

• Click on the OAuth Consent Screen available on the left-hand side panel.

• Choose User Type Internal. {% image src="/images/v1.7/deployment/security/google/select-user-type.png" alt="select-user-type" /%}

• Once the user type is selected, provide the App Information and other details.

• Click Save and Continue. {% image src="/images/v1.7/deployment/security/google/save-app-information.png" alt="save-app-information" /%}

• On the Scopes Screen, Click on ADD OR REMOVE SCOPES and select the scopes.

• Once done click on Update. {% image src="/images/v1.7/deployment/security/google/scopes-screen.png" alt="scopes-screen" /%}

• Click Save and Continue. {% image src="/images/v1.7/deployment/security/google/save-edit-app-registration.png" alt="save-edit-app-registration" /%}

• Click on Back to Dashboard. {% image src="/images/v1.7/deployment/security/google/back-to-dashboard.png" alt="back-to-dashboard" /%} {% image src="/images/v1.7/deployment/security/google/back-to-dashboard-2.png" alt="back-to-dashboard" /%}

Step 4: Create Credentials for the Project

• Once the OAuth Consent is configured, click on Credentials available on the left-hand side panel. {% image src="/images/v1.7/deployment/security/google/create-credentials.png" alt="create-credentials" /%}

• Click on Create Credentials

• Select OAuth client ID from the dropdown. {% image src="/images/v1.7/deployment/security/google/select-outh-client-id.png" alt="cselect-outh-client-id" /%}

• Once selected, you will be asked to select the Application type. Select Web application. {% image src="/images/v1.7/deployment/security/google/select-web-application.png" alt="select-web-application" /%}

After selecting the Application Type, name your project and give the authorized URIs:

• domain/callback

• domain/silent-callback {% image src="/images/v1.7/deployment/security/google/authorized-urls.png" alt="authorized-urls" /%}

• Click Create

• You will get the credentials {% image src="/images/v1.7/deployment/security/google/get-the-credentials.png" alt="get-the-credentials" /%}

Step 5: Where to Find the Credentials

• Go to Credentials

• Click on the pencil icon (Edit OAuth Client) on the right side of the screen {% image src="/images/v1.7/deployment/security/google/find-credentials.png" alt="find-credentials" /%}

• You will find the Client ID in the top right corner {% image src="/images/v1.7/deployment/security/google/find-clientid-and-secret.png" alt="find-clientid-and-secret" /%}

You will need to share the following information with the Collate team:

• Client ID