Skip to main content

Google Workspace SSO & Calendar Synchronization Setup (For IT Admin of Enterprises Using Google Workspace SSO)

Updated over 3 weeks ago

Google Workspace is a system commonly used to manage identities and productivity tools in an organization. Google provides an OAuth 2.0-based SSO (Single Sign-On) layer on top of Workspace accounts that can be used to provide an SSO experience for the organisation members. It is also possible to utilise our default Google authentication if your organisation does not wish to implement the enterprise authentication version.

It is worth noting that setting up Google Workspace SSO for your organisation will require actions from Brief AI. Please get in touch should your organisation like to enable Google Workspace SSO and calendar synchronisation.

For segregated environments, the intended setup includes a custom login page for your organisation in a custom domain (e.g. [organisation].wiseworks.ai). The custom login page will be configured to allow Google Workspace sign-in with your organisation’s domain, and to route users to the correct SSO integration.

Google Workspace SSO setup

Open the Google Cloud Console and select a project

  1. Visit the Google Cloud Console.

  2. From the project selector at the top, choose the project you will use for the WiseWorks SSO integration.

    • You may use any Google Cloud project your organisation prefers for this setup.

  3. If the OAuth 2.0 platform has not been configured yet, click Get started.

4. Configure the OAuth 2.0 consent screen

Fill out the required information on each step (App information, Audience, Contact information, Finish) to complete the setup.

Once complete, you will be able to proceed to creating the OAuth 2.0 client credentials.

5. Create an OAuth 2.0 client

After completing the consent screen setup, navigate to the Clients tab.

From here, select + Create client to generate a new OAuth 2.0 Client ID.

6. Fill in the details to create a new OAuth 2.0 client ID with Application type set to Web application.

For Authorised redirect URIs, enter one of the following:

  • If your organisation has not been assigned a custom domain name:

https://keycloak.app.wiseworks.ai/realms/prod/broker/<broker_id>/endpoint

  • If your organisation has been assigned a custom domain name:

https://keycloak.<organisation>.wiseworks.ai/realms/<organisation>/broker/<broker_id>/endpoint

7. Press create and a Client ID and Client secret will be generated.

Provide Brief AI the Client ID and Client secret so that we can complete the SSO configuration.

Google Calendar Synchronisation

Google Workspace SSO allows calendar synchronisation from Google Calendar. To enable this:

  1. Within the same project, navigate to APIs and services -> Library

2. Search for Google Calendar API - click enable.

3. After enabling the Google Calendar API, return to APIs & Services → OAuth consent screen → Data access

4. Select Add or remove scopes and select the following:

  • openid

  • https://www.googleapis.com/auth/userinfo.email

  • https://www.googleapis.com/auth/userinfo.profile

  • https://www.googleapis.com/auth/calendar.readonly

  • https://www.googleapis.com/auth/calendar.events.readonly

Save and publish the updated consent screen.

This will allow Brief AI to access the Google calendar on the user's behalf.

Did this answer your question?