> **Building with AI coding agents?** Install the authstack plugin with one command. This equips your agent with accurate Scalekit implementation patterns.
>
> **Recommended**:
> ```bash
> npx @scalekit-inc/cli setup
> ```
>
> Global:
> ```bash
> npm install -g @scalekit-inc/cli
> scalekit setup
> ```
>
> Supports Claude Code, Cursor, GitHub Copilot, Codex + skills for 40+ agents.
> Features: full-stack-auth, agent-auth, mcp-auth, modular-sso, modular-scim.
> [Full setup guide](https://docs.scalekit.com/dev-kit/build-with-ai/)

---

# Google Workspace - OIDC

Learn how to set up OpenID Connect (OIDC) Single Sign-On (SSO) using Google Workspace, with step-by-step instructions for app registration and client configuration.
This guide walks you through configuring Google Workspace as your OIDC identity provider. You'll create a Google OAuth app, configure an OAuth client, provide the required OIDC values in the SSO Configuration Portal, test the connection, and then enable Single Sign-On.

1. ## Create an OAuth App

   Sign in to **Google Cloud Console** and open the project you want to use for this integration. Search for **Google Auth Platform** and open it from the results list.

   > Image: Search for Google Auth Platform in Google Cloud Console

   Click **Get started** to begin the OAuth app setup.

   > Image: Google Auth Platform overview with Get started button

   Enter the **App Information** and select the appropriate **User support email**.
   > Image: Google OAuth app configuration flow

   Select the **Audience** as **Internal** and click **Next**.
   > Image: Google OAuth consent screen with Internal audience selected

   Add the relevant email address in the **Contact Information** and click **Next**.
   > Image: Google OAuth consent screen contact information step

   Agree to Google's policy and click **Continue** and then **Create**.
   > Image: Google OAuth consent screen policy agreement and Create button

2. ## Create OAuth Client

   From the left-side menu, navigate to **Clients** and click **Create client**.
   > Image: Google Auth Platform Clients page with Create client button

   In Application type dropdown, select **Web Application** and add **Name** for the client.
   > Image: Create OAuth client form with Web application selected and client name entered

   Copy the **Redirect URI** from **SSO Configuration Portal**.
   > Image: SSO Configuration Portal showing the Google OIDC Redirect URI

   On **Google console**, under the **Authorized redirect URIs**, click **Add URI**. Add the above copied URI to this field and click **Create**.
   > Image: Google OAuth client form with Authorized redirect URIs section

3. ## Provide Client Credentials

   After the client is created, copy the **Client ID** and **Client Secret** from Google Cloud.
   > Image: Google Cloud OAuth client details showing Client ID and Client Secret

   Add the above values under **Identity Provider Configuration** in the **SSO Configuration Portal**. For **Issuer URL**, use `https://accounts.google.com`. Once all values are entered, click **Update**.
   > Image: SSO Configuration Portal fields for Google Client ID and Client Secret
   > Image: SSO Configuration Portal showing the Google Issuer URL after update

4. ## Test Connection

   In the **SSO Configuration Portal**, click **Test Connection**. If everything is configured correctly, you will see a **Success** response.

   > note
>
> If the connection fails, you'll see an error, the reason for the error, and a way to solve that error right on the screen.

5. ## Enable Single Sign-On

   Once the test succeeds, click **Enable Connection** to allow users in your organization to sign in with Google Workspace OIDC.
   > Image: SSO Configuration Portal with Enable Connection button for Google Workspace OIDC

   This completes the Google Workspace OIDC SSO setup for your application.


---

## More Scalekit documentation

| Resource | What it contains | When to use it |
|----------|-----------------|----------------|
| [/llms.txt](/llms.txt) | Structured index with routing hints per product area | Start here — find which documentation set covers your topic before loading full content |
| [/llms-full.txt](/llms-full.txt) | Complete documentation for all Scalekit products in one file | Use when you need exhaustive context across multiple products or when the topic spans several areas |
| [sitemap-0.xml](https://docs.scalekit.com/sitemap-0.xml) | Full URL list of every documentation page | Use to discover specific page URLs you can fetch for targeted, page-level answers |