Google Workspace Integration

Google Workspace integration enables you to leverage Google’s managed identity service for user authentication and management.

Prerequisites

• Google Workspace OAuth consent screen configured (only needs to be configured for an internal audience)
• SendAuth subdomain configured

Configuration Steps

1. Configure OAuth Client

In the Google cloud console for your OAuth consent screen, click Create oAuth client.

The Application type should be Web application.

The Name should be SendAuth.

Click +Add URI under Authorized redirect URI and enter your SendAuth’s callback URL: https://<your-subdomain>.app.sendauth.com/oauth/callback, replacing <your-subdomain> with the subdomain configured in your SendAuth account.

Click Create, then OK.

2. Gather Integration Information

Click on the SendAuth client name you created in step 1.

Note the Client ID and Client secret.

3. Set Up Identity Provider

In SendAuth, navigate to Settings, then click the Authentication tab. Set Use local authentication to Disabled.

Issuer will be https://accounts.google.com.

Client ID will be the Client ID from step 2.

Client Secret will be the Client secret from step 2.

Click Save.

Once configured, users who visit https://<your-subdomain>.app.sendauth.com will be redirected to your Google Workspace sign-in page when they need to authenticate.