Setting up Google auth

In order to use Google for authentication, you must use the Google Developers Console to create a set of client credentials.

1. Go to the Google Developers Console and select or create a project; this will take you to the project page.
2. Click on + Enable APIs and Services
   1. Search for People API and click on Enable API.
3. Navigate back to the main “APIs & Services” page
4. On the sidebar, click on OAuth consent screen
   1. On consent screen settings, enter your identifying details
   2. Under Authorized domains add example.com
   3. Click on Save.
5. On the sidebar, click on Credentials; then click on Create credentials→OAuth Client ID
6. Under Application type select Web application.
7. You must set the authorization origins. Edit auth.example.com to the appropriate hostname that you will use to access the SSO service:
   1. JavaScript origin should be https://ClusterID.example.com/ (using Arvados-controller based login) or https://auth.example.com/ (for the SSO server)
   2. Redirect URI should be https://ClusterID.example.com/login (using Arvados-controller based login) or https://auth.example.com/users/auth/google_oauth2/callback (for the SSO server)
8. Copy the values of Client ID and Client secret from the Google Developers Console and add them to the appropriate configuration.

---

Previous: Install Nginx Next: Set up Docker