> ## Documentation Index
> Fetch the complete documentation index at: https://docs.paradime.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Workspace SSO

> Google Workspace SSO: Set up SSO with Google Workspace for Paradime and dbt™ projects. Ensure seamless user authentication.

## Introduction

Google Workspace provides secure identity management and single sign-on to applications that you can add to your Google Workspace. From Google Workspace, you can automatically provision users who should have access to Paradime i.e. any user who has access to your Google Workspace, will be able to register / login to Paradime.

## Setting up in Google

### 1. Register an OAuth 2.0 app

In your Google API Console set up an OAuth app by following the instructions here: [https://support.google.com/googleapi/answer/6158849](https://support.google.com/googleapi/answer/6158849).

During the setup, make sure you choose the following options:

#### 1.1 **User Type**:

Set to **Internal**

#### 1.2 **Authorized Domains**:

In the Authorized domain fields make sure you have at least the following:

* your email domain e.g. if your email is `xyz@abc.com` then `abc.com`
* `auth0.com`

#### 1.3 **Add or remove scopes**:

Choose the following user scopes:

* `../auth/userinfro.email`
* `../auth/userinfo.profile`
* `openid`

You should not choose any **sensitive / restricted scopes**. If you already have an OAuth 2.0 App setup, then you only need to make sure the `Authorized Domains` field is correct by following **1.2** above.

### 2. Create client-id and secret

#### 2.1 Create Credentials

Navigate to the `Credentials` tab within your Google API Console and click on **Create Credentials**. Choose `OAuth client ID` option.

<Frame caption="Create credentials">
  <img src="https://mintcdn.com/paradime-docs/GV4HPhgD7sIFolVh/images/gwsso-create-credentials.png?fit=max&auto=format&n=GV4HPhgD7sIFolVh&q=85&s=d975439e8c9c30c1f3aa088b197cf7f3" alt="Create credentials" width="1015" height="351" data-path="images/gwsso-create-credentials.png" />
</Frame>

#### 2.2 Enter details

* Choose **Application type**=`Web application`.
* Authorized Javascript origins: enter `https://auth.paradime.io`
* Authorized redirect URIs: enter `https://auth.paradime.io/login/callback`
* Click `Create`

<Frame caption="Enter details">
  <img src="https://mintcdn.com/paradime-docs/GV4HPhgD7sIFolVh/images/gwsso-enter-details.png?fit=max&auto=format&n=GV4HPhgD7sIFolVh&q=85&s=555641765398928d3e1edee28fa38355" alt="Enter details" width="1015" height="896" data-path="images/gwsso-enter-details.png" />
</Frame>

#### 2.3 Get the client-id and secret

Note down the **client-id** and **client-secret** when the OAuth client created.

<Frame caption="Get credentials">
  <img src="https://mintcdn.com/paradime-docs/GV4HPhgD7sIFolVh/images/gwsso-create-credentials.png?fit=max&auto=format&n=GV4HPhgD7sIFolVh&q=85&s=d975439e8c9c30c1f3aa088b197cf7f3" alt="Get credentials" width="1015" height="351" data-path="images/gwsso-create-credentials.png" />
</Frame>

## Configuring Paradime for workspace

Contact the Paradime Support team at [support@paradime.io](mailto:support@paradime.io) and share the following information:

* your `google-workspace-domain.com`
* **Client ID**
* **Client Secret**

Paradime Support will process your request. After receiving a confirmation email, you can start logging into Paradime and only users in your Google Workspace will be login to your account in Paradime.


## Related topics

- [Google SAML SSO](/products/single-sign-on/google-saml-sso.md)
- [Google SSO](/products/single-sign-on/google-sso.md)
- [Single Sign On (SSO)](/products/single-sign-on/index.md)
- [JumpCloud SSO](/products/single-sign-on/jumpcloud-sso-legacy.md)
- [Google Docs](/integrations/google-docs.md)