Set up Google single sign-on

Prerequisites

1. Configure OAuth for your Applaud App. See Google, help topics:
   • OAuth 2.0 for Mobile & Desktop Apps
   • Creating and managing projects

2. Create a project in your Google Cloud Platform. 
   Example settings:

   • Project name: "Single sign-on for Applaud"
   • Organization: "applaudhr.com"
   • Location: "applaudhr.com"

   If you already have a project you want to use, you can skip this step. Just make sure you select the correct project.

3. Configure your OAuth consent screen; see the Google help topic, Setting up your OAuth consent screen. 
   Example settings:
   • User type: "Internal"
   • App name: "Applaud"
   • Authorized domains: "applaudcloud.com" - The domain name of your tenant. If you're using a custom domain, you should also add the custom domain name to your allowed list of any web filters.
4. Create credentials for your OAuth client ID; see the Google help topic, Setting up OAuth 2.0. Use these settings:
   • For web applications:
     • Application type: "Web application"
     • Name: "Applaud"
     • Authorized redirect URIs: "https://<tenant.domain.com>/sso/google/callback"
     • COPY Your Client ID and Your Client Secret.
   • For iOS:
     • Application type: iOS
     • Application Name: Meaningful name
     • Bundle ID: com.applaudsolutions.EmployeeCenter
     • Download your plist file.

Procedure

1. On the Admin home page, select Settings.
2. Under the Sign in section, select Google.
3. In the Client ID box, enter the client ID that you generated in the prerequisite steps.
4. In the Client secret box, enter the client secret you generated in the prerequisite steps.
5. In the Reverse Client ID box, enter the reverse client ID in the plist file you downloaded in the prerequisite step.
6. Select UPDATE.

What happens next

When users access your Applaud tenant, they see a sign-in box with the SIGN IN WITH SSO button. You can customize this page using the Login content block. See our knowledge base article, Add a login block.

• If users are already signed in to their Google account, selecting the button signs them into your Applaud tenant automatically.

• If not signed in, the button opens the Google sign-in form.

  

Follow-up task

• Set your users' maximum session duration

See more:

• About Google single sign-on

Reference:

• Settings page