Custom Google Identity Provider: Bread & Butter

Step 1

Log in to the Google Cloud Console:

https://console.cloud.google.com/

Step 2

At the top of the page, click Select a Project, then New Project.

Step 3

For Project name, enter your organization’s name.
For Organization, select your organization.
For Location, select your organization.

Click Create

Step 4

In the left pane, click on APIs & Services, then OAuth consent screen, then select your new project from the top menu.

Step 5

For User Type, choose External.
Click Create.

Note: For the Google Social Provider, please ensure that the application type is External. This allows any Google user to authenticate and log in. Internal restricts login to your domain only.

Step 6

For Application name, enter your organization’s name.
For Support email, enter your email address.
Leave the App Logo empty. A custom App Logo will require additional App validation when publishing your App. See the last step for more information.
For Developer contact information, enter your email address.
Enter the remaining fields for your organization as needed (please note that these can be changed later).
Click Save and Continue.

Step 7

Click Add or Remove Scopes.
Select or manually add email, profile, and openid to scopes.
Click Update.
Click Save and Continue back on the main page.

Step 8

Click Add Users and add a user email address to test your app (optional).
Click Save and Continue.

Step 9

At the bottom of the page, click Back to Dashboard. Then, in the left menu, click on Credentials.

Step 10

Click Create credentials, and then select OAuth client ID.

Step 11

For Application type, select Web application.
For Name, enter your app name. We recommend entering your organization name.
For Authorized redirect URIs, enter:

https://api.breadbutter.io/callback
Click Create.

Step 12

In the dialog that appears, take note of the Client ID and Client Secret for the Bread & Butter setup below, or download the JSON.

Step 13

Bread & Butter Setup:

Go to https://app.breadbutter.io/sign-in/
Click Sign In and authenticate (or Sign Up make a new account and authenticate).
Go to Settings in the left menu.
Click on Google under SSO Settings > Social Accounts.
Select "Set Google for Production".
Enter a custom name and description.
Enter the Client ID from the Google setup steps above.
Enter the Client Secret from the Google setup steps above.
Click Save.
Click the checkbox next to your new Google provider to enable it.

Step 14

Log in to your app using the test user added in step 8.
In the left pane, click on Credentials.
Click Publish App to make your app available to any user with a Google account.