Google SSO | Axero Documentation

Axero supports Google integration for single sign-on (SSO), out-of-the-box. This page walks you through configuring Google OAuth 2.0 credentials, shows you how to enable Google integration, and demonstrates the Google login process.

Google SSO setup is estimated to take 1-2 hours. Once you complete the guide, Google SSO will be active on your intranet. For more information or assistance from the Axero team, submit a private case.

Features

• Join the intranet using any OAuth 2.0-compliant service
• Login to the intranet using any OAuth 2.0-compliant service
• Display OpenID options like Login via Google on the login and registration pages of your intranet

Configure OAuth 2.0 Credentials

1. Visit the Google Developers Console. You need to have a valid Google account and should be logged in using that account.
2. Create a project for your intranet if necessary. Click the project menu in the header.
   
3. Click New project.
4. Enter a name for the project.
5. Click Create.
6. Click OAuth consent screen.
7. Enter an App name.
8. Select the User support email.
9. Upload an App logo. (Optional)
10. In Application Homepage link, enter your site URL.
11. In Authorized domains, add the domain of your site. (Do not use the full URL. For example, the domain for https://my.intranet.com is intranet.com.)
12. Enter an email address in Developer contact information.
13. Click Save and Continue.
14. Click Add or remove scopes.
15. Check .../auth/userinfo.email, .../auth/userinfo.profile, and openid.
16. Click Update.
17. Click Save and continue.
18. Click Credentials.
19. Click Create credentials.
20. Click OAuth client ID.
21. Select Web application.
22. Enter a name for your application.
23. Under Authorized JavaScript origins, click Add URI.
24. Enter your intranet's URL (e.g., https://myintranet.com or https://my.intranet.com. Use http or https, depending on whether you have an SSL certificate installed on your server or not.
25. Under Authorized redirect URIs, click Add URI.
26. Enter your site URL followed by /oauth2/google/callback (e.g., https://myintranet.com/oauth2/google/callback).
27. Click Create.
28. Copy the client ID and client secret and save them for later.

Configure Axero

1. In Axero, click the  gear icon > Control Panel > System > General Settings.
2. Expand the Social Integration Settings section.
3. Enter the client ID in the Google integration API Key field.
4. Enter the client secret in the Google integration Secret field.
5. Check Enable Google integration.
6. Check Enable 3rd party login.
7. Click Save System Settings.

Login via Google

Enter your Google login information if necessary.

If Auto approve members is unchecked in Control Panel > System > General Settings > Site Settings, you'll see a message that your account is pending approval.

When you log in for the first time, you'll be prompted to set your username.

Customize Login Page

You can customize the login page to show only the Google login option.

1. Go to Control Panel > People > User Profiles
2. Edit Login Page
3. On the Login to your account section widget, click the gear icon > Edit Properties..
4. Click Advanced.
5. In Custom CSS class, enter hide .
6. Click Save Widget.
7. Click Publish changes.

Login button image

You can also change the login button image. Add the following code to CSS Overrides:

[id$='LoginUsingGoogle']:before {
   position: absolute;
   content: '';
   background-image: url('https://developers.google.com/identity/images/btn_google_signin_light_normal_web.png');
   width: 191px;
   height: 46px;
   pointer-events: none;
   z-index: 20000;
}

Login via Mobile App

Mobile Apps do not support login via Google SSO. Users must sign into the mobile app with their username or email and their Axero password.

Users can create an Axero password by clicking on their name in the header and then clicking on Password.