> ## Documentation Index
> Fetch the complete documentation index at: https://docs.datafold.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google OAuth

> Configure Google OAuth single sign-on (SSO) for Datafold. Step-by-step setup instructions for authenticating your team with Google.

<Info>
  **NOTE**

  Google SSO is available for both SaaS and VPC installations of Datafold.
</Info>

## Datafold SaaS

For Datafold SaaS the setup only involves enabling Google SSO integration.

If Google SSO is already enabled for your organization you will see it in the **Settings** → **Integrations** → **SSO**.

<Frame>
  <img src="https://mintcdn.com/datafold/BHI8Zy_v4DyXlmzL/images/google_oauth_list-5b0c84c5bdddde31c6e82cce055ba758.png?fit=max&auto=format&n=BHI8Zy_v4DyXlmzL&q=85&s=e7bb80685a41723dfa3c34b3b1d7a805" width="2658" height="680" data-path="images/google_oauth_list-5b0c84c5bdddde31c6e82cce055ba758.png" />
</Frame>

If this is not the case, create a new Google SSO Integration by clicking on the **Add new integration** button.

Enable the **Allow Google logins in organization** switch and click **Save**. That's it!
If you are not using Datafold SaaS, please see below.

## Create OAuth Client ID

To begin, navigate to the [Google admin console](https://console.cloud.google.com/apis/credentials?authuser=1%5C\&folder=%5C) for your organization, click **Create Credentials**, and select **OAuth Client ID**.

<Frame>
  <img src="https://mintcdn.com/datafold/BHI8Zy_v4DyXlmzL/images/google_oauth_create_credential-95776eb793bc1a1115c5fe1b18d9203f.png?fit=max&auto=format&n=BHI8Zy_v4DyXlmzL&q=85&s=2dd9a41200dbec554854e8f2152d4967" width="2546" height="1212" data-path="images/google_oauth_create_credential-95776eb793bc1a1115c5fe1b18d9203f.png" />
</Frame>

<Tip>
  **TIP**

  To configure OAuth, you may need to first configure your consent screen. We recommend selecting **Internal** to keep access limited to users in your Google workspace and organization.
</Tip>

<Frame>
  <img src="https://mintcdn.com/datafold/6zQ11m2yiOVjYXTT/images/google_oauth_consent_screen-6fd858ff5d1fc5fd43be910f055fe0ca.png?fit=max&auto=format&n=6zQ11m2yiOVjYXTT&q=85&s=f8fbe61a51916af96fac74baba6e0c57" width="1100" height="928" data-path="images/google_oauth_consent_screen-6fd858ff5d1fc5fd43be910f055fe0ca.png" />
</Frame>

### Configure OAuth[](#configure-oauth "Direct link to Configure OAuth")

* **Application type**: "Web application"
* **Authorized JavaScript origins**: `https://<your.domain.name>`
* **Authorized redirect URIs**: `https://<your.domain.name>/oauth/google`

<Frame>
  <img src="https://mintcdn.com/datafold/6zQ11m2yiOVjYXTT/images/google_oauth_authorizations-002a9446a71ba66ba4d375d897c4cdf7.png?fit=max&auto=format&n=6zQ11m2yiOVjYXTT&q=85&s=d81a93fc47ce61af186a44b1e3032d73" width="1301" height="1224" data-path="images/google_oauth_authorizations-002a9446a71ba66ba4d375d897c4cdf7.png" />
</Frame>

Finally, click **Create**. You will see a set of credentials that you will copy over to your Datafold Global Settings.

## Configure Google OAuth in Datafold

To finish the configuration, create a Google SSO Integration in Datafold.

To complete the integration in Datafold, create a new integration by navigating to **Settings** → **Integrations** → **SSO** → **Add new integration** → **Google**.

<Frame>
  <img src="https://mintcdn.com/datafold/BHI8Zy_v4DyXlmzL/images/google_oauth_create-463bc5c0d7cd049e0ba4ae8fdd577185.png?fit=max&auto=format&n=BHI8Zy_v4DyXlmzL&q=85&s=f6236303e7386aa134d770bc9004ba80" width="2070" height="666" data-path="images/google_oauth_create-463bc5c0d7cd049e0ba4ae8fdd577185.png" />
</Frame>

* Enable the **Google OAuth** switch.
* Enter the **domain** or URL of your OAuth client Id on the respective field.
* Paste the **Client Secret** on the respective field.
* Enable the **Allow Google logins in Organization** switch.
* Finally, click **Save**.