Create OAuth Client
Note: The instructions in this section are only needed when Google is used for authentication of the Atolio web application.
Create a new project in the Google Cloud Console by visiting https://console.cloud.google.com/cloud-resource-manager and clicking CREATE PROJECT. Provide a project name (e.g. Atolio) and select the correct Organization and Location. Note the Project ID field displayed below the Project name. If you are deploying Atolio on Google Cloud, this Project ID is required for the deployment (see Create Infrastructure on GCP). For sign-in alone it is optional, as listed in What to Provide to Atolio Support. Click CREATE.
This project will be used to create credentials for the Google OAuth Client (for authenticating Atolio users) and to create necessary resources to (allow) access to the Google Workspace by the Atolio stack later on.
Create the Google OAuth Client using the following steps:
- Visit https://console.cloud.google.com/apis/credentials/consent to set up the OAuth consent screen.
- Select Internal for User Type and click CREATE.
- Provide Atolio for the App name and enter email addresses for both support and developer contact information.
- Press SAVE AND CONTINUE.
- In the next Scopes screen there is no need for changes, just click SAVE AND CONTINUE again.
- Review your changes in the next Summary screen and click BACK TO DASHBOARD.
The OAuth credentials (client ID and secret) can now be created by:
- Navigating to https://console.cloud.google.com/apis/credentials and clicking CREATE CREDENTIALS in the top menu bar.
- Then select OAuth client ID from the drop down menu.
- For application type on the next screen choose Web application and fill out the rest of the form as shown in the table below (using your own domain name instead of the example).
- Click CREATE. The OAuth client will be created providing you with a Client ID and Secret.
- Download the JSON file.
| Field Name | Field Value |
|---|---|
| Application type | Web application |
| Authorized JavaScript origins | https://search.example.com |
| Authorized redirect URIs | https://search.example.com/auth/_callback |
You’ll provide the client ID and secret to Atolio Support as described in What to Provide to Atolio Support.
What to Provide to Atolio Support
After completing the steps above, send the following values to Atolio Support (your Deployment Engineer).
| Value | Where to find it | Example / format | Secret |
|---|---|---|---|
| OAuth Client ID | Step 4 of creating the OAuth credentials (also in the downloaded JSON file) | 123456789012-abc123def456.apps.googleusercontent.com | No |
| OAuth Client Secret | Step 4 of creating the OAuth credentials, or send the JSON file downloaded in step 5 instead | Long random string | Yes |
| Google Cloud Project ID (conditional) | Shown below the project name when you created the project. Needed only if you are also connecting Google Workspace (e.g. Google Drive, Gmail) to Atolio | atolio-123456 | No |
Keep secrets secure: Share values marked “Yes” in the Secret column only through a password-manager share (e.g. 1Password) or another secure channel agreed with Atolio Support. Never send them in plain email, chat, or support tickets.
Setup Google Connector
Once your Atolio infrastructure has been deployed, you will also need to setup the Google Connector so that Atolio can resolve each signed-in user to their Atolio identity and user mappings.