Google IDP - Setting Up Identity Provider (SSO)

Required User Credentials

[Flosum User] - SystemAdministrator Role

Overview

This guide explains how to integrate Google IDP with Flosum Cloud Apps to enable Single Sign-On (SSO) for seamless login.

For more general instructions about adding an Identity Provider, see the following article.

• Adding an Identity Provider (SSO)

Customer-Hosted

Customers who host Flosum Apps on their own infrastructure will have a custom URL for logging into their apps. When using this documentation, replace any Flosum Hosted URLs with your own URLs.

Outline Of Steps Involved

• Create a Client with Google IDP

• Set up the Redirect URL

• Obtain the Client ID and Client Secret

• Create an Identity Provider with Flosum Global Settings

• Test the SSO

Configuring Google IDP for Flosum Cloud Apps

This section shows you how to configure a Google IDP to work with Flosum Cloud Apps for SSO.

Please note that the instructions for Google IDP may not reflect the latest version. Some screens, field names, and steps might have changed.

1

Create an OAuth Client ID in Google Cloud Console

1. Access the Google Cloud Console.

2. Navigate to the API & Services section.

3. Select Credentials.

4. Click Create Credentials.

5. From the dropdown menu, choose OAuth Client ID.

   

2

Specify Application Type and Name

1. Under the Application type section, select the appropriate option (e.g., Web application).

2. Enter a name for your application in the Name field.

   

3

Configure Authorized Redirect URIs and Retrieve Credentials

1. In the Authorized redirect URIs section, add the URL of your region for each Flosum Cloud App you want to use with SSO. See the table below for the URLs for your region.

United States URLs

Flosum Cloud App	Callback URL
Global Settings	https://global-us.flosum.app/api/v1/oauth/callback
Backup & Archive	https://backup-us.flosum.app/api/v1/oauth/callback
DevOps	https://devops-us.flosum.app/api/v1/oauth/callback

Germany URLs

Japan URLs

Austraila URLs

1. Click Create. Note: After creating, the client's credentials will be displayed in a dialog box. Keep this open for the next step.

   

4

Retrieve Google IDP Client Details

You will need the Your Client ID and Your Client Secret values when creating the Identity Provider in Flosum Global Settings.

1. Copy the Your Client ID value.

2. Copy the Your Client Secret value.

   

The Issuer URL for most configurations is: https://accounts.google.com . However, it is recommended to confirm the URL and copy it if it is different.

Create Identity Provider In Global Settings

1

Create Identity Provider

Log in to Flosum Global Settings by following the instructions in the linked article.

• Log In To Global Settings

For more general instructions about adding an Identity Provider, see the following article.

• Adding an Identity Provider (SSO)

1. Click Identity Providers from the sidebar menu.

2. Click Create.

   
3. Enter a Name for the identity provider.

4. Click the Type dropdown menu.

   
5. Select OPEN_ID.

   
6. Enter the values you saved from your Google IDP into the following fields in the OpenId Information on the Create Identity Provider form.

Google IDP	Global Settings
Your Client ID	Client ID
Your Client Secret	Client Secret
https://accounts.google.com (unless otherwise noted)	Issuer

1. In the Button Text textbox, enter a label to be displayed on the login button on the login screen.

2. Click Save.

   

2

Log In to Flosum Cloud Apps Using Google IDP

After configuring Google IDP and adding the Identity Provider, test your SSO implementation by logging in to Flosum Global Settings.

Tenant Name Log In

SSO is only available when logging in with your Tenant Name.

No SSO Button

If the SSO button you created with the Identity Provider is missing from the tenant login screen, there may be an issue with the provider details. Verify that the Identity Provider configuration matches the SSO credentials.

1. Open the Flosum Cloud App to log in.

2. Click Use tenant name.

   
3. Enter Tenant Name.

   
4. Click the SSO button created by your system administrator.

   

This button may be labeled differently from the screenshot above. Ask your system administrator if you are unsure which button to click.

1. Complete the login with your SSO provider.