2021-06-22 19:46:44 +00:00
---
title: Google
---
2022-06-15 19:31:34 +00:00
< span class = "badge badge--secondary" > Support level: Community< / span >
2021-06-22 19:46:44 +00:00
Allows users to authenticate using their Google credentials
## Preparation
The following placeholders will be used:
2022-05-09 19:22:41 +00:00
- `authentik.company` is the FQDN of the authentik install.
2021-06-22 19:46:44 +00:00
## Google
2022-05-09 19:22:41 +00:00
You will need to create a new project, and OAuth credentials in the Google Developer console. The developer console can be overwhelming at first.
2021-06-22 19:46:44 +00:00
1. Visit https://console.developers.google.com/ to create a new project
2021-10-18 14:35:12 +00:00
2. Create a New project.
2021-06-22 19:46:44 +00:00
2022-05-17 22:03:02 +00:00
![](googledeveloper1.png)
2021-06-22 19:46:44 +00:00
3. **Project Name** : Choose a name
2021-10-19 13:45:15 +00:00
4. **Organization** : Leave as default if unsure
2021-06-22 19:46:44 +00:00
5. **Location** : Leave as default if unsure
2022-05-17 22:03:02 +00:00
![](googledeveloper2.png)
2021-06-22 19:46:44 +00:00
6. Click **Create**
7. Choose your project from the drop down at the top
2022-05-09 19:22:41 +00:00
8. Click the **Credentials** menu item on the left. It looks like a key.
2021-06-22 19:46:44 +00:00
2022-05-17 22:03:02 +00:00
![](googledeveloper3.png)
2021-06-22 19:46:44 +00:00
9. Click on **Configure Consent Screen**
2022-05-17 22:03:02 +00:00
![](googledeveloper4.png)
2021-06-22 19:46:44 +00:00
2022-05-09 19:22:41 +00:00
10. **User Type:** If you do not have a Google Workspace (GSuite) account choose _External_ . If you do have a Google Workspace (Gsuite) account and want to limit access to only users inside of your organization choose _Internal_
2021-06-22 19:46:44 +00:00
_I'm only going to list the mandatory/important fields to complete._
11. **App Name:** Choose an Application
12. **User Support Email:** Must have a value
13. **Authorized Domains:** authentik.company
14. **Developer Contact Info:** Must have a value
15. Click **Save and Continue**
2022-05-09 19:22:41 +00:00
16. If you have special scopes configured for google, enter them on this screen. If not click **Save and Continue**
2021-06-22 19:46:44 +00:00
17. If you want to create Test Users enter them here, if not click **Save and Continue**
2022-05-09 19:22:41 +00:00
18. From the _Summary Page_ click on the \*_Credentials_ link on the left. Same link as step 8
2021-06-22 19:46:44 +00:00
19. Click **Create Credentials** on the top of the screen
20. Choose **OAuth Client ID**
2022-05-17 22:03:02 +00:00
![](googledeveloper5.png)
2021-06-22 19:46:44 +00:00
21. **Application Type:** Web Application
22. **Name:** Choose a name
23. **Authorized redirect URIs:** `https://authenik.company/source/oauth/callback/google/`
2022-05-17 22:03:02 +00:00
![](googledeveloper6.png)
2021-06-22 19:46:44 +00:00
24. Click **Create**
25. Copy and store _Your Client ID_ and _Your Client Secret_ for later
2021-10-18 14:35:12 +00:00
## authentik
2021-06-22 19:46:44 +00:00
2022-05-17 22:03:02 +00:00
26. Under _Directory -> Federation & Social login_ Click **Create Google OAuth Source**
2021-06-22 19:46:44 +00:00
27. **Name** : Choose a name (For the example I use Google)
28. **Slug** : google (If you choose a different slug the URLs will need to be updated to reflect the change)
29. **Consumer Key:** Your Client ID from step 25
30. **Consumer Secret:** Your Client Secret from step 25
2021-10-18 14:35:12 +00:00
Here is an example of a complete authentik Google OAuth Source
2021-06-22 19:46:44 +00:00
2022-05-17 22:03:02 +00:00
![](authentiksource.png)
2021-06-22 19:46:44 +00:00
Save, and you now have Google as a source.
:::note
2021-12-13 10:56:26 +00:00
For more details on how-to have the new source display on the Login Page see [here ](../ ).
2021-10-18 14:35:12 +00:00
:::