Configure Google as an IdP
Once you’ve configured federated login for your organizaiton. You can configure Google as an IdP to allow your customers to log in to the portal using their Google account. In order to configure a federated login using a Google account, you need to register a client in Google. Here’s how:
To add a new client:
- Log in to your Google account and access Google Cloud Developer Console to create a new project.
- In the New Project page, enter a name for the setup, for example Zoho Billing Client Portal and click Create.
- Click the Menu icon in the top left corner of the page.
- Navigate to API and Services, and click OAuth consent screen.
- In the OAuth consent screen, click Clients in the left side bar.
- Click Get started, and enter your App name. In this case, Zoho Billing.
- Select the user support email. Users can contact this email incase of issues.
- Select External for the Audience. This allows all users with a Google account to access this application.
- Click Next and update the Contact Information. This is the email that Google will use to send you regular updates on your application.
- Finish the setup by agreeing to the Google API Services: User Data Policy.
- Click Create.
- Navigate to Audience in the left side bar and scroll to Publishing Status.
- Click Publish App.
The app will be published in Google console and the OAuth consent will be configured. You will be able to create an OAuth Client for your project. Here’s how:
- Go to the OAuth overview page and click Create OAuth client.
- Choose Web application in the application type dropdown and enter your portal name.
- In the Authorized redirect URIs field, enter the Redirect URL(link to top) and click Create.
- Now, a client will be created and the Client ID and Client Secret will be displayed. Copy the Client ID and Client Secret and paste it in your federated login configuration page in Zoho Billing.
Your can then use this to configure Google as an IdP for federated login. Now, when a customer visits your portal, they can sign in using their Google account.