1. Display name

Choose a name for your identity provider. This is the user-facing name, so choose a name your users will recognize. This value can be changed later.

Open

2. Redirect Mode

Select how the user will be redirected to the identity provider. You may configure more redirect modes after completing the setup.

Open

3. Prepare IDP

Copy and save the Callback URL for later. You will need this when configuring Google GSuite.

Configure Google

EXTERNAL

Sign in to https://console.developers.google.com/apis/credentials

In the Credentials page select “Create Credentials” and then “OAuth client ID”.

In the Create OAuth client ID page:

• Set Application type to Web application

• Enter a suitable name in the Name field.

• Add one Authorized redirect URIs and paste the Callback URL that you kept from the KSSO setup wizard in the above step.

• Then click Create

On OAuth client created page, copy the values of Your Client ID and Your Client Secret and keep these for use in step 5 below.

Go back to the KSSO setup wizard.

4. Metadata

I the Metadata step the Discovery URL should already be automatically configured. Click Next.

5. Scopes

These are the scopes we were able to fetch from the metadata. You can add scope values from a list, start typing to add your own or unselect them. A minimum of one scope value is required.

6. Credentials

Paste the Client ID and Client Secret you kept from the OAuth client created page in step 2 and clik Next.

7. Summary

Check that everything looks good and submit your setup

Test

Test that logging in with Google works as expected. This will help identify if there are any issues with the configuration. Follow the steps to perform the login test.