Skip to content
DeepintShield DeepintShield

SSO with Google

Overview

Section titled “Overview”

DeepIntShield lets your team sign in to the dashboard using your existing identity provider over OpenID Connect (OIDC). This page covers Google Workspace SSO. The same connection flow also supports Okta, Auth0, Microsoft Entra ID, and any generic OIDC provider - see the related guides below.

Once a connection is configured, users sign in from the login screen by choosing Sign in with SSO, and accounts are provisioned just-in-time on first login. Email-domain restrictions ensure only users from your organization’s domains can sign in through the connection.

Prerequisites

Section titled “Prerequisites”
  • A Google Cloud project with admin access to create OAuth credentials
  • DeepIntShield deployed and reachable at a stable URL
  • Your DeepIntShield login callback URL (e.g. https://your-deepintshield-domain.com/login)

Step 1: Create Google OAuth credentials

Section titled “Step 1: Create Google OAuth credentials”

  1. In the Google Cloud Console, open APIs & Services → Credentials.

  2. Click Create Credentials → OAuth client ID and choose Web application.

  3. Under Authorized redirect URIs, add your DeepIntShield login callback URL:

    https://your-deepintshield-domain.com/login

  4. Save, then copy the generated Client ID and Client Secret.

Step 2: Add the connection in DeepIntShield

Section titled “Step 2: Add the connection in DeepIntShield”

In the DeepIntShield dashboard, open the Access settings and add a new SSO connection:

  • Provider: Google
  • Client ID: the Client ID from Google
  • Client Secret: the Client Secret from Google
  • Email domains: the domains allowed to sign in through this connection (e.g. yourcompany.com). Only users whose email matches one of these domains can use the connection.

Save and enable the connection.

Step 3: Sign in

Section titled “Step 3: Sign in”

On the DeepIntShield login screen, users click Sign in with SSO and select the Google connection. On first login an account is created automatically (just-in-time provisioning), and a session is issued.

Section titled “Related guides”