How to Setup SSO using Google
VIDIZMO allows you to enable sign-in with a Google Account, the same account used with Gmail and other Google services.
To learn more about SSO, see Understanding Single Sign-On.
Prerequisites
- Ensure you belong to a group where the SSO permission is enabled.
- You must have a Google account to create a web application in the Google Cloud Console.
Google Cloud Console Configuration
- Go to the Google Cloud Console and sign in with your Google account.
- Create a new project or select an existing project.
- Go to APIs & Services > OAuth consent screen and configure the consent screen. Enter your application name, email address, and your VIDIZMO portal domain as an authorized domain.
- Go to APIs & Services > Credentials and select Create Credentials > OAuth client ID.
- Select Web application as the application type.
- Enter the following:
- Authorized JavaScript origins
Your VIDIZMO portal URL (for example,
https://yourportal.vidizmo.com). - Authorized redirect URIs
Your VIDIZMO portal URL with the callback path
/sso/signin-googleappended (for example,https://yourportal.vidizmo.com/sso/signin-google).
- Authorized JavaScript origins
Your VIDIZMO portal URL (for example,
- Select Create. Note the Client ID and Client Secret for use in VIDIZMO configuration.
For more details, see Setting up OAuth 2.0.
NOTE: Google SSO only works in HTTPS mode. If you have multiple portals, separate applications are required for each portal. See How to Configure your Portal to use HTTPS only.
VIDIZMO Configuration
- In VIDIZMO, select the menu icon in the top-left corner to open the navigation pane.
- Expand the Admin section and select Portal Settings.
- Go to Apps > Single Sign-On.
- Select the settings icon on the Google SSO app.
- In the settings dialog, enter the following:
- Client ID The Client ID from your Google Cloud Console app.
- Client Secret The Client Secret from your Google Cloud Console app.
- SSO Login Message A custom message displayed on the sign-in page for this SSO option.
- SSO Login Button Label A custom label for the Google sign-in button on the sign-in page.
- Callback Path
Pre-configured to
/sso/signin-google. This must match the redirect URI in your Google Cloud Console app. - Force Login Select this option to redirect users directly to the Google sign-in page. When unchecked, users sign in through your Portal's sign-in screen.
- Attribute Mapping Map your Google attributes (FirstName, LastName, EmailAddress, ExternalSystemId) to your VIDIZMO Portal. You can also add new attribute mappings if needed. For more on user registration fields, see How to Add Custom Fields to Join Portal Form.
- CAL Select a Client Access License to assign to users who sign in through Google SSO. When a user enters the Portal via Google SSO, this CAL is assigned to them, granting the permissions associated with that CAL.
- Select Save to apply your changes.
- Turn on the toggle for the Google SSO app to enable SSO.
Result
Navigate to your Portal's sign-in screen. You will see an option to Sign in with Google SSO.