For Requestors

To integrate an application or website with the LF Google Workspace, create a ticket request at https://jira.linuxfoundation.org/plugins/servlet/desk/portal/3/create/1209 with the following:

• SSO setup documentation from the application or website on integrating with Google Workspace SSO

  • Examples: Google | Cloudflare Zero Trust docs , Configuring Google for OIDC-based SSO

• If there is no documentation for Google specifically, include a link to the application’s OIDC or SAML setup documentation.

For Cloudops

Application SSO Setup Documentation

Google SSO setup requires the URL of the target site, and possibly a callback URL. This will be in the documentation link included in the ticket.

1. Create a new application client id by following Google’s guide: https://developers.google.com/identity/gsi/web/guides/get-google-api-clientid#get_your_google_api_client_id. Roughly:

   • https://console.developers.google.com/apis/credentials > Create Credentials > OAuth Client ID > Web Application

   • Set Authorized Javascript Origins to the URL of the website (without path)

   • Add the site’s callback (if needed) to Authorized Redirect URIs

2. Copy the Client ID and Client Secret of the created application, and send that back to the ticket requestor via a 1Password share link.