Google

​

Google OAuth 2.0 Setup

Follow the Google OAuth 2.0 guide to create a Google application or use an existing one.

​

Steps

1. Create a Google Cloud Project (if not already available) at Google Cloud Console.

2. Enable the OAuth 2.0 API:

   • Go to APIs & Services > Credentials.
   • Click “Create Credentials” and select OAuth Client ID.

3. Create an OAuth 2.0 Application:

   • Choose “Web Application” as the Application Type.
   • Skip adding the Authorized Redirect URI for now; it can be added later after deploying the TrueFoundry service.

4. Save the following details:

   • Client ID
   • Client Secret

5. Open the OpenID Configuration:

   • Example:

     https://accounts.google.com/.well-known/openid-configuration
     

   • This contains required fields like:

     • Issuer
     • JWKS URI
     • Authorization URL
     • Token URL
     • Supported Scopes

​

Integration with TrueFoundry

• Use the values from the OpenID configuration in the integration.

• For Client Secret, you can:

  • Create a TrueFoundry Secret, or
  • Directly add the value.

• Include the mandatoryopenid scope, along with other required scopes (e.g., email etc.).

• Set JWT Source toID Token instead of Access Token.

Example configuration