Configuring Addigy Identity with Google enables end users to log into their macOS devices using their Google credentials. For more details on Addigy Identity visit our Addigy Identity Overview article.
Enabling Addigy Identity
To enable Addigy Identity navigate to Account > Integrations > Addigy Add-ons. Click on Addigy Identity and toggle on the 'Enabled' switch on the top right. Once enabled you will see a green outline and a green checkmark appear as shown in the screenshot below:
Select Google as your identity provider within a policy
- After Addigy Identity is enabled navigate to Policies > Integrations & Settings > Identity.
- Select Google Identity Platform from the identity provider dropdown.
- Once selected the Client ID and Client Secret fields will appear. Proceed to the next step to continue configuring Addigy Identity.
Sign in to Google Cloud
1. In https://cloud.google.com/ select "Console" in the top right, assuming you already have an account.
2. If this is your first time signing in or if you have never created a project within the Google Admin Console, you'll first need to agree to their terms & conditions. This should automatically pop up if you have not accepted them prior.
Create a Project in Google Cloud
-
Click the grid in the top left corner next to Google Cloud > hover your mouse over IAM & Admin > Create a Project.
Fill out the Project Name, Organization, and Parent resource.
Configure your OAuth Consent Screen
Once the project is created you will need to configure your OAuth Consent Screen. Information on this page will be visible to users, so be mindful of the information entered.
-
To configure the OAuth Consent Screen navigate to APIs & Services > OAuth consent screen
-
Click Get started and fill out App Information, Audience, Contact Information, and Finish. For audience read through the descriptions of "Internal" and "External" and select the option that would best suit your business needs.
-
Once finished you can navigate to Branding and configure settings such as App logo and App domain. While App logo and App domain are optional the App information will be shown to the user.
-
Data Access is where you can add scopes. For more information on scopes, kindly reference Google's article here.
Note: Scopes are optional and are not required for Addigy Identity to function at a basic level.
Create OAuth 2.0 credentials
Note: You may skip this step if you already have these credentials
Go to the Credentials page by going to APIs & Services > Credentials > Create credentials > OAuth client ID
Select Web Application in the Application Type dropdown.
Enter a name for the application in the Name field.
-
Add the following Authorized redirect URI to Authorized redirect URIs:
https://agent-service-prod.addigy.com/identity/redirect - Click Create.
-
After you click create, you'll see your client ID and client secret (you'll need this later on in the setup):
Note: You can view your client ID and Client secret from Credentials > click the pencil next to the name of your OAuth 2.0 Client ID. Your cCient ID and Client Secret will be visible. You need OAuth 2.0 credentials, including a client ID and client secret, to authenticate users.
For additional resources visit https://developers.google.com/identity/protocols/oauth2/openid-connect
Finalize Addigy Identity configuration
Enter the Client ID and Client Secret as shown in the screenshot below:
Customize Addigy Identity
You can customize Addigy Identity by enabling or disabling these settings:
Visit our Addigy Identity Overview article to see how each setting will impact the end user.
Collect User Attribute Data
You can Collect User Attribute Data by enabling this setting:
To configure User Attributes visit our Addigy Identity User Attributes for Google article.
Login Window Theme
You can customize the Login Window Theme by uploading a background image and logo:
Scroll to the bottom of the page and click Save Changes.
Once the changes are saved and the policy deploys Addigy Identity will install on end users device. Upon the end user rebooting their device they will be able to seamlessly authenticate with their organizational email and password. Visit our Addigy Identity End User Experience article to see how Addigy Identity appears and functions on your end users devices.