In this article, you'll learn how to set up Single Sign-On (SSO) authentication with Custom Google Domain. The SSO can be implemented for both Web and Admin Portals.
Keep in mind that when you activate an SSO authentication, the following OfficeRnD Workplace authentication services are disabled:
The standard login with an OfficeRnD Workplace user and password.
The "Reset password" links in OfficeRnD Workplace.
The token for authentication is what employees receive when invited to the Members Portal.
Enable SSO with Google
2. Click Create Project.
3. Navigate to the OAuth consent screen and choose how to configure and register your app, including your target users.
4. Choose the User Type as External or Internal and click Create.
5. Set the Application Name to Workpalce and complete the configuration.
6. Navigate to Credentials and click Create credentials.
7. Choose OAuth client ID and select Application Type: Web application
8. Set a Name.
9. Open your OfficeRnD Workplace account in a separate browser tab.
10. Go to Settings > Integrations and click Activate next to SSO Authentication.
11. Click Configure and copy the Return URL.
12. Go back to the Google Cloud Platform. Find the Authorized redirect URIs section and click Add URI.
13. Paste the Return URL you copied in step 12 and click Create.
14. A confirmation dialog opens with the Client ID and Client Secret. Copy the Client ID and navigate to the OfficeRnD Workplace SSO configuration window. Paste the value in the Client ID field.
15. Copy the Client Secret and go to the OfficeRnD Workplace SSO configuration dialog. Paste the value in the Client Secret field.
16. Next, we must set the Discovery URL on the OfficeRnD Workplace side in the SSO Authentication configuration. You can follow this article to get the Discovery URL or you can enter it manually: https://accounts.google.com/.well-known/openid-configuration
17. Enable Automatic Account Activation - With this setting enabled, employees that already exist in OfficeRnD Workplace will be allowed to log into the Portals without needing to be explicitly invited. If this setting is disabled, employees without prior access to the Portals will need to have it Enabled by an administrator.
18. Click Update.
Admin Portal SSO
After configuring the Web Portal SSO, you can also add your Admin Portal SSO.
1. Click Configure on the SSO integration in OfficeRnD Workplace.
2. Click Activate Admin Portal SSO, and the following fields will appear:
3. Copy the Return URL.
4. Open your newly created project in Google.
5. Switch to the Credentials section and open the OAuth 2.0 Client IDs section by clicking on your project's name.
6. Under Authorized Redirect URIs, click Add URI and paste the copied Return URL.
7. Save your changes on both platforms.