DMTG TechHelp Center
Provider guide

Set up Google Workspace SSO

Create a Google OAuth web client and restrict sign-in to approved Workspace domains.

Google Workspace administrators9 min readUpdated July 17, 2026

Create an OAuth client

  1. Configure the OAuth consent screen for the organization.
  2. Create an OAuth client ID with application type Web application.
  3. Add the exact authorized redirect URI displayed on the portal’s Single sign-on page.
  4. Copy the client ID and client secret into a secure temporary location.

Configure the portal

  1. Select Google Workspace as the provider.
  2. Enter the client ID and client secret.
  3. Add every approved Workspace hosted domain; do not use an email suffix as the only identity check.
  4. Choose JIT and role defaults, then save and test with an account in an approved domain.

Provider reference

Related guides

Continue configuring this part of your intranet.

Overview

Configure single sign-on

Understand the tenant-scoped SSO workflow for Microsoft Entra ID, Google Workspace, OIDC, and SAML.

Identity administrators8 min read Provider guide

Connect a Google Workspace staff directory

Use domain-wide delegation and organizational scoping to import active staff profiles.

Google Workspace administrators11 min read Guide

Manage portal access and approved networks

Choose local, organization, or combined sign-in and optionally permit limited homepage access from trusted public network ranges.

Security administrators7 min read