Skip to main content
Google sign-in admits users whose email is in one of your allowed domains. Authentication overview has the rules shared by every provider.

​
Setup

1

Create OAuth credentials in Google Cloud Console

You need a Google Cloud project. Open the Google Cloud Console credentials page and create an OAuth client ID:
  • Application type: Web application
  • Authorized redirect URI: https://<your-rootprint>/api/auth/callback/google
Copy the Client ID and Client Secret.
2

Enter credentials in Rootprint

In Rootprint, go to Settings → Authentication, then click Configure on the Google row. Enter:
  • Client ID and Client Secret: from the Google Cloud Console.
  • Allowed domains: the email domains whose users can sign in. For example, company.com admits alice@company.com but blocks user@gmail.com.
3

Save the configuration

Click Save. A Continue with Google button appears on the sign-in page.