Google OIDC Setup

This guide walks you through configuring SSO with Google Workspace as your identity provider.

Prerequisites

• Admin access to your Google Cloud Console
• A Google Workspace organization (for domain-restricted access)
• Admin access to your Stallion organization

Step 1: Create OAuth Credentials in Google Cloud

1. Go to the Google Cloud Console
2. Select or create a project
3. Navigate to APIs & Services → Credentials
4. Click Create Credentials → OAuth client ID
5. If prompted, configure the OAuth consent screen first

Step 2: Configure OAuth Consent Screen

1. Go to APIs & Services → OAuth consent screen
2. Select Internal (for Google Workspace) or External
3. Fill in the required information:
   • App name: Stallion SSO
   • User support email: Your support email
   • Developer contact: Your email
4. Add scopes: email, profile, openid
5. Save and continue

Step 3: Create OAuth Client ID

1. Go back to Credentials → Create Credentials → OAuth client ID
2. Select Web application
3. Configure:

4. Click Create

Step 4: Gather OIDC Configuration

After creating the OAuth client, note down:

Step 5: Configure SSO in Stallion Console

1. Log in to Stallion Console
2. Navigate to your Organization → SSO Settings
3. Click Configure SSO

Step 5.1: Enter Configuration

Enter the following details:

Click Next to proceed.

Step 5.2: Verify Domain

1. Copy the provided TXT record
2. Add it to your domain's DNS settings
3. Wait for DNS propagation (this may take a few minutes)
4. Click Verify to confirm domain ownership

Step 5.3: Finalize SSO

1. Click Finalize SSO
2. You will be redirected to Google to log in
3. Complete authentication with your Google Workspace credentials
4. Once successful, SSO is fully configured

Restricting Access to Your Domain

To ensure only users from your Google Workspace domain can access Stallion:

1. Use an Internal OAuth consent screen, or
2. Configure domain restrictions in Stallion Console after SSO setup

Troubleshooting