How can I configure SSO in the Google Cloud Console?
Create a Google project, enable the Drive API, create OAuth credentials and verify your domain.
This configuration must be done by the myschool account administrator. If you use a Google Workspace account, the Google Cloud Console must be enabled for you by your Workspace administrator.
1. Create a project
- Open the Google Cloud Console and sign in with your Google account.
public/images/articles/google-sso-configure-google-console-1.png- Click Create Project.
public/images/articles/google-sso-configure-google-console-2.png- Enter the project name, accept the terms and conditions, and click Create.
public/images/articles/google-sso-configure-google-console-3.png2. Enable the Google Drive API
The Drive API gives access to the API and to the UI integration features.
- Open your project and select Enable APIs and Services.
public/images/articles/google-sso-configure-google-console-4.png- Select Google Drive API.
public/images/articles/google-sso-configure-google-console-5.png- Click Enable to enable the Drive API.
public/images/articles/google-sso-configure-google-console-6.png3. Create OAuth 2.0 credentials
- Click Credentials, then Create credentials → OAuth client ID. If asked, configure the consent screen first.
public/images/articles/google-sso-configure-google-console-7.png- Select Web application as the application type and give it a readable name.
- Under Authorized redirect URIs, enter
https://<your-school-domain>/authenticate, then click Create.
Note: If you are setting up Single Sign-On for more than one school, enter each URL on a new line in the same format.
The consent screen is shown to a user the first time they sign in with Google. It tells the user which permissions are being granted to the application.
public/images/articles/google-sso-configure-google-console-8.png- Google shows your Client ID and Client secret.
public/images/articles/google-sso-configure-google-console-9.png- Note down both values and click OK. You will enter them in the myschool account panel.
4. Verify your domain
Domain verification makes sure no one else can use your domain with your Google services without your permission.
- Click Domain verification.
public/images/articles/google-sso-configure-google-console-10.png- Click Add domain, enter your domain and click Add domain. Google checks that you own each domain listed.
public/images/articles/google-sso-configure-google-console-11.png- Before the domain can be registered, you must verify ownership. Click Take me there.
public/images/articles/google-sso-configure-google-console-12.png- In Google Search Console, add a new property or choose an unverified property from the property selector.
public/images/articles/google-sso-configure-google-console-13.png- Choose one of the available verification methods and follow the instructions. Not every method is available for every property type; the verification page lists the methods available and recommended for your site.
public/images/articles/google-sso-configure-google-console-14.pngNote: Several people can add and verify the same property, using the same or different methods. If you use the same method as another owner, make sure you don’t overwrite their verification token.
Walkthrough
public/images/articles/google-sso-configure-google-console-15.pngpublic/images/articles/google-sso-configure-google-console-16.pngWas this article helpful?
Thanks for your feedback!