BigQuery OAuth

Paradime supports OAuth authentication with BigQuery. When BigQuery OAuth is enabled, users can authorize their Development credentials using Single Sign On (SSO) via BigQuery.

If BigQuery is setup with SSO through a third-party identity provider, developers can use this method to login to BigQuery and authorize the dbt™️ Development credentials without any additional setup.

BigQuery

Creating a BigQuery OAuth 2.0 client ID and secret

To enable OAuth, you will need to create a Client ID and Secret to authenticate with GCP and manage the OAuth connection between Paradime and BigQuery.

In the Big Query Console, navigate to APIs & Services and select Credentials. If you haven't already, you will need to set up an OAuth consent screen then click on + Create Credentials in the top navigation bar and select from the menu OAuth client ID.

Required Configurations

Use the below configurations to set up the BigQuery OAuth app and click on the Create button. You will generate the Client ID and Secret, that will be required to connect Paradime to your BigQuery account.

Config	Value
APPLICATION TYPE	Web application
NAME	paradime
AUTHORIZED JAVASCRIPT ORIGINS	Required. Use the correct domain, you can check your selected region during onboarding in the Workspace Management section of your Account Settings. 🇪🇺 eu-west-2 (Europe - London) https://api.paradime.io 🇪🇺 eu-west-1 (Europe - Ireland) https://eu-w1-api.paradime.io 🇪🇺 eu-central-1 (Europe - Frankfurt) https://eu-c1-api.paradime.io 🇺🇸 us-east-1 (US East - N. Virginia) https://api.us.paradime.io
AUTHORIZED REDIRECT URIs	Required. Use the correct domain, you can check your selected region during onboarding in the Workspace Management section of your Account Settings. 🇪🇺 eu-west-2 (Europe - London) https://api.paradime.io/control-plane/bigquery/redirect 🇪🇺 eu-west-1 (Europe - Ireland) https://eu-w1-api.paradime.io/control-plane/bigquery/redirect 🇪🇺 eu-central-1 (Europe - Frankfurt) https://eu-c1-api.paradime.io/control-plane/bigquery/redirect 🇺🇸 us-east-1 (US East - N. Virginia) https://api.us.paradime.io/control-plane/bigquery/redirect

OAuth 2.0 Scopes for Google APIs

Paradime BigQuery OAuth app will request the below scopes:

• https://www.googleapis.com/auth/bigquery

• https://www.googleapis.com/auth/drive.readonly

• https://www.googleapis.com/auth/devstorage.read_only