Configuring Addigy Identity with Google lets end users log into their macOS devices using their existing Google credentials — no separate local password to manage or reset. See the Addigy Identity Overview for more on what Addigy Identity does.
How to Enable Addigy Identity
- Navigate to Account > Integrations > Addigy Add-ons.
- Click Addigy Identity and toggle on Enabled in the top right. Once enabled, you'll see a green outline and checkmark.
How to Select Google as Your Identity Provider
- Navigate to Policies > Integrations & Settings > Identity.
- Select Google.
- The Client ID and Client Secret fields appear — you'll fill these in once you've generated them in Google Cloud (below).
How to Generate OAuth Credentials in Google Cloud
Sign In to Google Cloud
- At cloud.google.com, select Console in the top right (assuming you already have an account).
- If this is your first time signing in, or you've never created a project in the Google Admin Console, you'll need to agree to Google's terms and conditions — this should prompt automatically if you haven't accepted them already.
Create a Project
- Click the grid icon next to Google Cloud, hover over IAM & Admin, then select Create a Project.
- Fill out the Project Name, Organization, and Parent resource.
Configure Your OAuth Consent Screen
Once your project is created, configure the OAuth consent screen. The information you enter here will be visible to end users, so be mindful of what you include.
- Navigate to APIs & Services > OAuth consent screen.
- Click Get started and fill out App Information, Audience, Contact Information, then click Finish. For Audience, read the descriptions of "Internal" and "External" and choose the option that fits your organization.
- Navigate to Branding to configure an app logo and app domain. Both are optional, but the App Information you entered will be shown to the user.
-
Data Access is where you can add scopes — see Google's documentation on scopes for details.
Note: Scopes are optional and aren't required for Addigy Identity to function at a basic level.
Create OAuth 2.0 Credentials
Note: Skip this step if you already have OAuth 2.0 credentials.
- Go to APIs & Services > Credentials > Create credentials > OAuth client ID.
- Select Web Application in the Application Type dropdown.
- Enter a name for the application in the Name field.
- Add the following to Authorized redirect URIs:
https://agent-service-prod.addigy.com/identity/redirect - Click Create.
- Your Client ID and Client Secret are now shown — you'll need these in the next step.
Note: You can view your Client ID and Client Secret anytime from Credentials, by clicking the pencil icon next to your OAuth 2.0 Client ID's name. You need both to authenticate users.
For more detail, see Google's OpenID Connect documentation.
How to Finalize Addigy Identity Configuration
- Back in Addigy, enter the Client ID and Client Secret you generated.
How to Customize Addigy Identity
Enable or disable the available settings to customize how Addigy Identity behaves.
See the Addigy Identity Overview for how each setting affects the end-user experience.
Collect User Attribute Data
Enable this setting to collect user attribute data.
To configure which attributes are collected, see Addigy Identity User Attributes for Google.
Login Window Theme
Customize the login window's theme by uploading a background image and logo.
Scroll to the bottom of the page and click Save Changes. Once saved and the policy deploys, Addigy Identity installs on end-user devices. After the user reboots their device, they can authenticate seamlessly with their organizational email and password. See Addigy Identity End User Experience for how this appears to end users.
Frequently Asked Questions
Do I need to configure scopes in the OAuth consent screen?
No, scopes are optional and aren't required for Addigy Identity to work at a basic level. Only configure them if you need the additional data access they provide.
What if I already have OAuth 2.0 credentials for another purpose?
You can skip the "Create OAuth 2.0 Credentials" step and reuse your existing Client ID and Client Secret, as long as you add Addigy's redirect URI (https://agent-service-prod.addigy.com/identity/redirect) to that credential's Authorized redirect URIs.
When does Addigy Identity actually appear for end users?
After you save your changes and the policy deploys, Addigy Identity installs on the end user's device. It becomes active once the user reboots, at which point they can log in with their organizational email and password.