Skip over navigation
Documentation
You are currently viewing documentation for version 3.0 which is not a long-term support release. The latest long-term support release is version 2.6

Google Single Sign-On

Oro application supports Google Single Sign-On. This means that for a user that has the same primary email in the Oro application and Google accounts, it is enough to log-in only once during a session.

Google Side

Create Project

To configure single sign-on on the Google side:

  1. Open Google API Console

  2. Navigate to My Project selector in the top left corner and click Create Project.

  3. Define the Project Name and click Create.

    ../../../../_images/new_project.jpg

Create Credentials

  1. Click Credentials in the menu on the left and open the Credentials tab.

    ../../../../_images/create_credentials.jpg
  2. Click Create Credentials and select 0Auth client ID.

    ../../../../_images/create_credentials_2.jpg
  3. To create an OAuth client ID, first set a product name on the consent screen.

Oro Application Side

Configure Google Integration

To configure the integration with Google in your OroCRM or OroCommerce application:

  1. Navigate to System > Configuration in the main menu.

  2. In the left panel, click Integrations > Google Settings.

  3. Define the following fields for Google Integration Settings:

    Field Description
    Client ID The Client ID generated in the API console.
    Client Secret The Client Secret generated in the API console.
    Google API Key The API Key generated in the API console. Provide a valid Google API key to activate maps for addresses in the system.
  4. Define the following fields for Google Sign-on:

    Field Description
    Enable Check Enable.
    Domains Domains is a comma separated list of allowed domains. It limits the list of mailboxes for which single sign-on can be used (e.g., only a domain used specifically by your company). Leave the field empty to set no such limitation.
    OAuth 2.0 for email sync Check Enable.
../../../../_images/oro_google_integration_new.jpg

Log in with Google

When a user gets to the login page of an instance for which single sign-on capability has been enabled, the Login Using Google link is displayed.

../../../../_images/login_using_google.jpg

If the user is not logged into any Google accounts after the link has been clicked, a usual Google log-in page will appear.

As soon as the user has logged into their Google account, a request to use the account in order to log-in to Oro application is displayed (details defined for the consent screen is used).

../../../../_images/google_connection.jpg

For now on, for a user logged-in into a Google account, it is enough to click the Login using Google link to get into Oro application.

Note

Note that the email used for the Google account and the primary email of the user in Oro application must be the same.

Browse maintained versions:3.01.122.02.32.6

You will be redirected to [title]. Would you like to continue?

Yes No
sso for www.magecore.comsso for oroinc.desso for oroinc.fr
Back to top