Google

Google OAuth 2.0 Setup

Follow the Google OAuth 2.0 guide to create a Google application or use an existing one.

Steps

1. Create a Google Cloud Project (if not already available) at Google Cloud Console.
2. Enable the OAuth 2.0 API:
   • Go to APIs & Services > Credentials.
   • Click "Create Credentials" and select OAuth Client ID.
3. Create an OAuth 2.0 Application:
   • Choose "Web Application" as the Application Type.
   • Skip adding the Authorized Redirect URI for now; it can be added later after deploying the TrueFoundry service.
4. Save the following details:
   • Client ID
   • Client Secret
5. Open the OpenID Configuration:
   • Example:

     https://accounts.google.com/.well-known/openid-configuration

   • This contains required fields like:
     • Issuer
     • JWKS URI
     • Authorization URL
     • Token URL
     • Supported Scopes

Integration with TrueFoundry

• Use the values from the OpenID configuration in the integration.
• For Client Secret, you can:
  • Create a TrueFoundry Secret, or
  • Directly add the value.
• Include the mandatoryopenid scope, along with other required scopes (e.g., email etc.).
• Set JWT Source toID Token instead of Access Token.

Example configuration