Google Workspace SSO

Use this guide when your organization signs in with Google Workspace accounts. Lettermint uses Google's OpenID Connect discovery document and an OAuth 2.0 web application client.

Before you start

You need access to the Google Cloud project used for your Workspace login configuration. Google requires an OAuth 2.0 client ID and client secret, and the redirect URI registered in Google Cloud must exactly match the Lettermint OIDC callback URL from the SSO guide.

Google Cloud setup

1. Open the Google Cloud Console.
2. Create or select the project that should own the OAuth client.
3. Configure the OAuth consent screen for your organization.
4. Create an OAuth client ID with application type Web application.
5. Add the Lettermint OIDC callback URL from the SSO guide as an authorized redirect URI.
6. Copy the client ID and client secret.

Lettermint setup

In the Lettermint SSO setup screen, choose Google Workspace and enter:

Lettermint requests the openid, email, and profile scopes.

References

• Google: OpenID Connect