Show / Hide Table of Contents

    Google Account Provider

    To allow users to sign in with Google:

    • Set up and configure a Project on the Google Developers Console
    • Activate the Google Account Provider (see Activate an Account Provider)
    • Set the configuration parameters on the Google Account Provider

    Configure a Google Project

    1. From the Google Developer Console, log in with your Google account.
    2. In the Project Name type a unique name for your Project.
    3. Click Create and wait until the project is created. If you are not redirected to the Project Dashboard, select the project from the drop down list on top of the page.
    4. On the left side: click Credentials.
    5. Click "OAuth consent screen" tab.
    6. In the Application Name type a unique name for your Application.
    7. In the Authorized domains type theidentityhub.com.
    8. Click Save.
    9. Click the Credentials tab.
    10. Under APIs Credentials click Create credentials and select OAuth client ID.
    11. For Application type select Web application.
    12. In the Name type The Identity Hub.
    13. In the Authorized redirect URIs type https://www.theidentityhub.com/{tenant}/authenticate/processaccountproviderresponse
    14. Click Create.
    15. Make a note of the client ID and the client secret.
    16. On the left side: click Library.
    17. In Search for APIs & Services type Google+ API.
    18. Select Google+ API.
    19. Click ENABLE and wait for API to be enabled.

    Specific configuration parameters for the Google Account Provider

    Parameter Description
    Client ID The client id of the Google App created on the Developer Portal (see Configure a Google App)
    Client secret The app secret of the Google App created on the Developer Portal (see Configure a Google App)
    Default Scopes The scopes that The Identity Hub will request when a user signs in. (see Default Scopes)
    Scopes Additional scopes that you want to be requested. Currently this has no further implication

    Default Scopes

    Scope Description Required/Optional
    https://www.googleapis.com/auth/plus.me To be able to sign in. Required
    https://www.googleapis.com/auth/userinfo.email To retrieve the email address of the user. Optional
    https://www.googleapis.com/auth/plus.login To retrieve the Google Circle Friends of the user (that also signed in using this Account Provider). Optional
    https://www.googleapis.com/auth/userinfo.profile To retrieve the user's image and display name. Optional

    Optional scopes can be unchecked. Information related to this scopes will not be available to The Identity Hub.

    Related

    Amazon Account Provider
    Activate an Account Provider
    Built-in Username and Password Account Provider
    Custom Account Providers)
    Facebook Account Provider GitHub Account Provider
    Instagram Account Provider
    LinkedIn Account Provider
    Microsoft Account Provider
    Office 365 Account Provider
    PayPal Account Provider
    SAML-P Account Provider
    StackExchange Account Provider
    Twitter Account Provider
    WS-Federation Account Provider