# Google Workspace SSO Setup Guide

Providing documentation to your users on how to set up SSO with Google is important for a smooth integration process. Below is an example guide of what this documentation could look like.

01. Begin by navigating to your [Google Cloud Platform Console](https://console.cloud.google.com/).

02. From the projects list, select a project or create a new one.

03. On the left side menu, select **APIs & services**.

04. If you have never created an OAuth consent screen (what your users will see after clicking `Sign in with Google`), you will be prompted to fill that out first. Fill in the information for your application.

05. Click **Create Credentials**, then select **OAuth client ID**.

06. In the Application Type dropdown select **Web Application**. Then, name the OAuth client.

07. Under **Authorized Redirect URIs**, enter the redirect URI for your app (e.g., `https://myapp.com/callback`). See [here](https://docs.byo.propelauth.com/sso/overview#callback-url-configuration) for more details on the callback URL that you should provide to your users.

08. Click **Create**.

09. Copy the **Client ID** and **Client Secret** and paste them into `{your application}`.

10. Click on **Audience** followed by **Make internal**. This will restrict sign-in to users within your organization.

11. Enter the following URLs into `{your application}`:
    - **Authorize URL**: `https://accounts.google.com/o/oauth2/v2/auth`
    - **Token URL**: `https://oauth2.googleapis.com/token`
    - **Userinfo URL**: `https://openidconnect.googleapis.com/v1/userinfo`
12. Click **Save** in `{your application}`.
