Google Workspace
Connect Google Workspace as your SSO identity provider.
Google Workspace sign-in uses an OAuth client that you create in Google Cloud. Only accounts on your verified domains can sign in through it.
You need permission to create OAuth clients in a Google Cloud project that belongs to your Google Workspace organization. You do not need Google Workspace super admin access.
Create the OAuth client in Google Cloud
- Open the Google Cloud console and select a project in your Workspace organization.
- Go to APIs & Services → OAuth consent screen (shown as Google Auth Platform in newer consoles). If it asks you to set one up:
- App name: for example
ArmorIQ. - User support email: an address you manage.
- Audience: Internal, so only your Workspace accounts can use it.
- App name: for example
- Go to Clients (or Credentials) and click Create client (or Create credentials → OAuth client ID).
- Application type: Web application. Name: for example
ArmorIQ SSO. - Leave Authorized JavaScript origins empty. Under Authorized redirect URIs, click Add URI and paste the Redirect URI shown on the ArmorIQ setup page:
https://sso.armoriq.ai/callback- Click Create, then copy the Client ID and Client secret. Store the secret safely; Google may not show it again.
Connect it in ArmorIQ
- In Settings → Single sign-on, under Identity provider, choose Google Workspace.
- Client ID: paste the client ID. It ends in
.apps.googleusercontent.com. - Client secret: paste the secret. Use the eye icon to check what you pasted.
- Name on the sign-in page (optional): for example
Acme Google. - Click Save connection.
Verify a domain first. Google sign-in is limited to your verified domains, so the connection cannot be saved without one.