Configuring Addigy Identity with Google enables end users to log into their macOS devices using their Google credentials. For more details on Addigy Identity visit our Addigy Identity Overview article.
Enabling Addigy Identity
To enable Addigy Identity navigate to Account > Integrations > Addigy Add-ons. Click on Addigy Identity and toggle on the 'Enabled' switch on the top right. Once enabled you will see a green outline and a green checkmark appear as shown in the screenshot below:
Select Google as your identity provider within a policy
- After Addigy Identity is enabled navigate to Policies > Integrations & Settings > Identity.
- Select Google Identity Platform from the identity provider dropdown.
- Once selected the Client ID and Client Secret fields will appear. Proceed to the next step to continue configuring Addigy Identity.
Sign in to Google Cloud
1. In https://cloud.google.com/ select "Console" in the top right, assuming you already have an account.
2. If this is your first time signing in or if you have never created a project within the Google Admin Console, you'll first need to agree to their terms & conditions. This should automatically pop up if you have not accepted them prior.
Create a Project in Google Cloud
-
Click the grid in the top left corner next to GoogleCloud > Hover your mouse over IAM & Admin > Select Create a Project.
Fill out the Project Name, Organization, and Location.
Configure your OAuth Consent Screen
Once the project is created you will need to configure your OAuth Consent Screen. Information on this page will be visible to users, so be cognizant of the information being entered.
-
To configure this, navigate to APIs & Services > OAuth consent screen
-
You will then be guided through the following screens. Please read through the descriptions of "Internal" and "External" and select the option that would best suit your business needs.
- In this area, configure any options that may be applicable. In my case, I opted to skip the "App domain" section and only changed the settings for "App information". Do note that the app information will be shown to the user, as shown in the second screenshot below (clicking the App name will show the support email).
The next screen, Scopes, will ask you to add scopes. For more information on scopes, kindly reference Google's article here.
Note:Scopes are optional and are not required for Addigy Identity to function at a basic level.After clicking Update, select Save and Continue.
Finally, you can click Back to Dashboard in the Summary area (step 3).
Create OAuth 2.0 credentials
Note: You may skip this step if you already have these credentials
Go to the Credentials page by clicking the hyperlink or going to APIs & Services > Credentials > OAuth client ID
Select Web Application in the Application Type dropdown.
Enter a name for the application in the Name field.
-
Add the following Authorized redirect URI to Authorized redirect URIs:
https://agent-service-prod.addigy.com/identity/redirect - Click Create.
After you click create, you'll see your client ID and client secret (you'll need this later on in the setup):
You need OAuth 2.0 credentials, including a client ID and client secret, to authenticate users.
You can view your client ID and client secret from the Credentials in the Google API Console:
Go to the Credentials page.
Click the name of your credential or the pencil icon. Your client ID and secret are at the top of the page.
For additional resources visit https://developers.google.com/identity/protocols/oauth2/openid-connect
Finalize Addigy Identity configuration
Enter the Client ID and Client Secret as shown in the screenshot below:
Customize Addigy Identity
You can customize Addigy Identity by enabling or disabling these settings:
Visit our Addigy Identity Overview article to see how each setting will impact the end user.
Collect User Attribute Data
You can Collect User Attribute Data by enabling this setting:
To configure User Attributes visit our Addigy Identity User Attributes for Google article.
Login Window Theme
You can customize the Login Window Theme by uploading a background image and logo:
Scroll to the bottom of the page and click Save Changes.
Once the changes are saved and the policy deploys Addigy Identity will install on end users device. Upon the end user rebooting their device they will be able to seamlessly authenticate with their organizational email and password. Visit our Addigy Identity End User Experience article to see how Addigy Identity appears and functions on your end users devices.