Enable Google authentication
To enable Single Sign-On (SSO) with Google, you must first create a Google Cloud project, configure the OAuth consent screen, and create an OAuth client. You will then use your OAuth client’s ID and secret to link NXLog Platform to Google.
Create a Google Cloud project
-
Log in to your Google Cloud Portal account.
-
Click the projects' dropdown and then click New project.
-
Enter a Project name, for example,
NXLog Platform
, and an optional parent organization. -
Click the Create button.
Configure your OAuth consent screen
-
Navigate to the Google Auth Platform product and click GET STARTED.
-
Enter an App name, for example,
NXLog Platform
. -
Enter the remaining information requested by the wizard, making sure that you select the External audience.
-
Click CREATE to complete the wizard.
-
Click Data Access on the left navigation sidebar, and then on ADD OR REMOVE SCOPES to select the information available to NXLog Platform.
-
Enable userinfo.email, userinfo.profile, and openid, and click the UPDATE button.
-
Click SAVE to commit the changes.
-
Optionally, click Audience on the left navigation sidebar and add test users.
Create an OAuth client ID
-
Click Clients on the left navigation sidebar, and then on the + CREATE CLIENT button to create an OAuth client ID.
-
Select Web application for the Application type field.
-
Enter an application Name, for example,
NXLog Platform
. -
Add the Authorized redirect URI
https://auth.nxlog.example.com/landing
, replacingnxlog.example.com
with your NXLog Platform domain. This is where Google will redirect users after authorization. -
Click CREATE.
-
Click the new OAuth client on the list and take note of the Client ID and Client secret; you will use these to link NXLog Platform to Google Cloud.
Link NXLog Platform to Google Cloud
-
Log in to NXLog Platform and navigate to Administration > Tenant operations > Platform configuration.
-
Look for the Google section under Social Login.
-
Enter your Google Cloud client ID and secret in the Client ID and Secret fields.
-
Enable the switch (green). NXLog Platform hides the Secret and enables SSO authentication with Google.
Invite users to NXLog Platform
Before users can sign in using Google, you must invite them to NXLog Platform using their email address, and they must accept the invitation to create an account. See Manage organization users for more information.