Google OAuth

Before using Google services within Internal, you must create a new set of credentials to authenticate against.

Configure consent screen

1. Head to the Google OAuth consent screen page.
2. Add required information like a product name and support email address.
3. Add your domain to the Authorized domains list. (e.g. internal.example.com)
4. Click Submit

For more information regarding the Google OAuth consent screen, you can view Google's detailed instructions here.

Create authorization credentials

1. Head to the Google Credentials page.
2. Click Create credentials > OAuth client ID.
3. Select the Web application application type.
4. Name the OAuth 2.0 client (e.g. Internal OnPrem)
5. Add your host to the Authorized JavaScript origins (e.g. https://internal.example.com)
6. Add the following Authorized redirect URIs (assuming your host is example.com):
7. https://example.com/api/oauth2/exchange/
8. https://example.com/api/sso/auth/google-oauth2

Confirm that your settings look similar to below:

If everything looks good, click Create and make a note of your Client ID and ClientSecret. Save these values to your environment file like below.

  
  INTERNALIO_GOOGLE_CLIENT_ID={GOOGLE_CLIENT_ID}
  INTERNALIO_GOOGLE_CLIENT_SECRET={GOOGLE_CLIENT_SECRET}
  

Enable Google APIs

In order to access Google Sheets as datasources, the Google Sheets and Google Drive APIs must be enabled.

1. Visit the Google API Library, select the correct project, and enable the following APIs:

• Google Sheets
• Google Drive

Finishing Up

Now that the credentials have been created and both the Google Sheets and Google Drive APIs have been enabled, re-deploy your Internal image by following the instructions in the OnPrem Deployment guide.

‍