Google Workspace SSO

cside lets you use Google Workspace SSO to authenticate users into your cside organization.

When Google Workspace SSO is enabled, anyone with your company email domain will be forwarded to sign in with Google. Only accounts managed by your Google Workspace on that domain can sign in. Personal Gmail accounts are rejected, even if their email address matches your domain. When someone signs in for the first time, they are automatically added to your cside organization with no permissions.

Requirements:

• cside Enterprise plan
• Organization Admin role in cside
• An already setup cside organization
• Admin access to your Google Workspace’s Google Cloud console

Unlike our other SSO providers, Google Workspace SSO is configured for you by cside. You create an OAuth client in your own Google Cloud console, then share its details with your cside representative. Once configured, it appears in your organization’s SSO settings as managed by cside.

Create a Google OAuth Client

1. Go to the Google Cloud console and select a project owned by your organization (or create one).
2. Navigate to APIs & Services > Credentials.
3. Click Create credentials > OAuth client ID.
4. If prompted to configure the consent screen first, set the audience to Internal so only accounts in your Google Workspace can use it.
5. Under Application type, select “Web application”.
6. Enter a name for the client (e.g., “cside”).
7. Under Authorized redirect URIs, add https://dash.cside.com/auth/callback/oidc
8. Click Create.
9. Copy the Client ID and Client secret shown after creation.

Share the Details with cside

Send your cside representative the following, through a secure channel:

1. Email Domain: Your company’s email domain (e.g., example.com)
2. Client ID: The OAuth client ID you created
3. Client Secret: The OAuth client secret you copied

cside will configure and verify the integration for your organization. The verification includes a real sign-in with a Google Workspace account on your domain, so your representative may ask an admin on your side to complete it.

Testing Your Configuration

Once cside confirms the configuration is active, you can test it by:

1. Opening a new incognito/private browser window
2. Navigating to dash.cside.com
3. Entering an email address with your configured domain
4. You should be redirected to Google for authentication