Google

the ui can be configured to allow users to authenticate using their corporate google credentials this page will walk you through the configuration process create an authorization source obtain a client id and client secret from the google system these values should be geneated based on the public url of your ui client id and client secret can typically be generated at https //console developers google com see https //developers google com/identity/protocols/oauth2 for further instructions configure ui from the top menu , click system > auth sources on the left menu, click new enter a name for the source (e g google) this name will sppear on the sign in button on the login page in the driver field, select google the redirect uri should be the url of your management ui (e g https //contoso korgrid com) enter the client id and client secret values obtained from google in the previous section remote user fields is the list of fields used to initially find the google user this field is auto populated with sub,preferred username,email,nickname this default list is typically sufficient for most implementations options (recommended) options (recommended) update remote user once user is located in the google system, update the user's remote username field to the corresponding google unique id (sub string) update user email address update local user's email address to match email address in google update user display name update local user's display name to match display name in google enabling the update remote user option will allow the system to store the user's unique google id in the ui's user record so the unique identifier can subsequently be used for finding the google user; this is typically recommended since fields such as email address can sometimes change additional fields (optional) additional fields (optional) see docid 1udnzdkkrvnkdcedoehw4 for information regarding additional optional fields after completing the configuration, click submit to save the new authorization source manually add users from google after the authorization source is created, users can be created manually to utilize google as their source for login from the top menu , click system > users from the left menu, click new authorization source select google as the source from the dropdown list username unique name; typically it is recommended to use the same login as google remote username recommended to use the user's google id display name (optional) if update user display name is enabled on the google auth source, the display name will automatically synchronize from the google user email address (optional) if update user email address is enabled on the google auth source, the email address will automatically synchronize from the google user click submit