How To Set Up Your Own Google App (OpenID Connect)

Last updated 12/01/2023

Step 1

Log in to the Google Cloud Console:

https://console.cloud.google.com/

Step 2

At the top of the page, click Select a Project, then New Project, if you have not already created a Project.


Step 3

  • For Project name, enter your organization’s name.
  • For Organization, select your organization.
  • For Location, select your organization.

Click Create

Step 3

Step 4

At the top of the page, change your project to the one you just created. If it's your first project, it should already be selected.

Step 4

Step 5

In the left pane, click on APIs & Services, then OAuth consent screen.


Step 6

  • For User Type, choose Internal.
  • Click Create.
Step 6

Step 7

  • For Application name, enter your organization’s name.
  • For Support email, enter your email address.
  • Leave the App Logo empty. A custom App Logo will require additional App validation when publishing your App. See the last step for more information.
  • Enter the remaining App domains fields for your organization as needed (please note that these can be changed later).
  • For Developer contact information, enter your email address.
  • Click Save and Continue.
Step 7

Step 8

  • Click Add or Remove Scopes.
  • Select or manually add email, profile, and openid to scopes.
  • Click Update.
  • Click Save and Continue.
Step 8

Step 9

In the left pane, click on Credentials.


Step 10

Click Create credentials, and then select OAuth client ID.

Step 10

Step 11

  • For Application type, select Web application.
  • For Name, enter your app name. We recommend entering your organization name.
  • For Authorized JavaScript origins, enter:

    https://api.breadbutter.io

  • For Authorized redirect URIs, enter:

    https://api.breadbutter.io/callback

  • Click Create.
Step 11

Step 12

In the dialog that appears, copy the Client ID and Client Secret for the Bread & Butter setup below, or download the JSON.


Step 13

Bread & Butter Setup:

  1. Go to https://app.breadbutter.io/sign-in/
  2. Click Sign In and authenticate (or Sign Up make a new account and authenticate).
  3. Go to Settings in the left menu.
  4. Click on the Google button under SSO Settings > Enterprise Accounts.
  5. Choose OpenID Connect for the protocol.
  6. Enter a name.
  7. Enter a description (optional).
  8. In the Login URL field, enter:

    https://accounts.google.com/o/oauth2/v2/auth

  9. In the Token URL field, enter:

    https://oauth2.googleapis.com/token

  10. Enter the Client ID from the Google OAuth setup steps above.
  11. Enter the Client Secret from the Google OAuth setup steps above.
  12. Click Save.
  13. Enable Google by clicking the new entry in the Google Identity Providers list.
Step 13

Step 14

  • Go back to Google.
  • In the left pane, click on OAuth consent screen.
  • Click Publish App to make your app available to any user with a Google account.
Step 14

Step 15

You may still see breadbutter.io on the Google sign in window. To address this, you'll need to complete the Custom Domain Branding Setup