> **Building with AI coding agents?** If you're using an AI coding agent, install the official Scalekit plugin. It gives your agent full awareness of the Scalekit API — reducing hallucinations and enabling faster, more accurate code generation.
>
> - **Claude Code**: `/plugin marketplace add scalekit-inc/claude-code-authstack` then `/plugin install <auth-type>@scalekit-auth-stack`
> - **GitHub Copilot CLI**: `copilot plugin marketplace add scalekit-inc/github-copilot-authstack` then `copilot plugin install <auth-type>@scalekit-auth-stack`
> - **Codex**: run the bash installer, restart, then open Plugin Directory and enable `<auth-type>`
> - **Skills CLI** (Windsurf, Cline, 40+ agents): `npx skills add scalekit-inc/skills --list` then `--skill <skill-name>`
>
> `<auth-type>` / `<skill-name>`: `agentkit`, `full-stack-auth`, `mcp-auth`, `modular-sso`, `modular-scim` — [Full setup guide](https://docs.scalekit.com/dev-kit/build-with-ai/)

---

# Google Workspace - OIDC

Learn how to set up OpenID Connect (OIDC) Single Sign-On (SSO) using Google Workspace, with step-by-step instructions for app registration and client configuration.
This guide walks you through configuring Google Workspace as your OIDC identity provider. You'll create a Google OAuth app, configure an OAuth client, provide the required OIDC values in the SSO Configuration Portal, test the connection, and then enable Single Sign-On.

1. ## Create an OAuth App

   Sign in to **Google Cloud Console** and open the project you want to use for this integration. Search for **Google Auth Platform** and open it from the results list.

   > Image: Search for Google Auth Platform in Google Cloud Console

   Click **Get started** to begin the OAuth app setup.

   > Image: Google Auth Platform overview with Get started button

   Enter the **App Information** and select the appropriate **User support email**.
   > Image: Google OAuth app configuration flow

   Select the **Audience** as **Internal** and click **Next**.
   > Image: Google OAuth consent screen with Internal audience selected

   Add the relevant email address in the **Contact Information** and click **Next**.
   > Image: Google OAuth consent screen contact information step

   Agree to Google's policy and click **Continue** and then **Create**.
   > Image: Google OAuth consent screen policy agreement and Create button

2. ## Create OAuth Client

   From the left-side menu, navigate to **Clients** and click **Create client**.
   > Image: Google Auth Platform Clients page with Create client button

   In Application type dropdown, select **Web Application** and add **Name** for the client.
   > Image: Create OAuth client form with Web application selected and client name entered

   Copy the **Redirect URI** from **SSO Configuration Portal**.
   > Image: SSO Configuration Portal showing the Google OIDC Redirect URI

   On **Google console**, under the **Authorized redirect URIs**, click **Add URI**. Add the above copied URI to this field and click **Create**.
   > Image: Google OAuth client form with Authorized redirect URIs section

3. ## Provide Client Credentials

   After the client is created, copy the **Client ID** and **Client Secret** from Google Cloud.
   > Image: Google Cloud OAuth client details showing Client ID and Client Secret

   Add the above values under **Identity Provider Configuration** in the **SSO Configuration Portal**. For **Issuer URL**, use `https://accounts.google.com`. Once all values are entered, click **Update**.
   > Image: SSO Configuration Portal fields for Google Client ID and Client Secret
   > Image: SSO Configuration Portal showing the Google Issuer URL after update

4. ## Test Connection

   In the **SSO Configuration Portal**, click **Test Connection**. If everything is configured correctly, you will see a **Success** response.

   > note
>
> If the connection fails, you'll see an error, the reason for the error, and a way to solve that error right on the screen.

5. ## Enable Single Sign-On

   Once the test succeeds, click **Enable Connection** to allow users in your organization to sign in with Google Workspace OIDC.
   > Image: SSO Configuration Portal with Enable Connection button for Google Workspace OIDC

   This completes the Google Workspace OIDC SSO setup for your application.


---

## More Scalekit documentation

| Resource | What it contains | When to use it |
|----------|-----------------|----------------|
| [/llms.txt](/llms.txt) | Structured index with routing hints per product area | Start here — find which documentation set covers your topic before loading full content |
| [/llms-full.txt](/llms-full.txt) | Complete documentation for all Scalekit products in one file | Use when you need exhaustive context across multiple products or when the topic spans several areas |
| [sitemap-0.xml](https://docs.scalekit.com/sitemap-0.xml) | Full URL list of every documentation page | Use to discover specific page URLs you can fetch for targeted, page-level answers |