Step 1
Log in on https://console.developers.google.com/apis/dashboard. Go to the dashboard page and click on Create Project at the right side.
Step 2
Choose a project name (e.g. Company name-SSO) and select the organisation and location for which the SSO will be configured. Creating the project can take a while. The page will eventually redirect you to the dashboard of the new project.
Step 3
Go tho the page OAuth consent screen and choose User Type Intern. Then click on Create.
Step 4
In the Application name field, fill in Dialog and fill in the email address of the Google Workspace admin.
Also upload the Dialog icon below.
Step 5
Scroll down and fill in the following 3 lines:
- Application Homepage link: https://app.dialog.nl
- Application Privacy Policy link: https://api.dialog.nl/privacy/privacy-declaration-en.pdf
- Application Terms of Service link: https://api.dialog.nl/privacy/cookie-policy-en.pdf
When filling out the OAuth Consent Screen, Google now strictly requires an email address under Developer contact information at the very bottom of the page. You can use the same Google Workspace admin email you used in Step 4.
Step 6
Scroll down and fill in the domains that have access to the application (e.g. companyname.nl). Then, click on Save and continue.
Note: After Step 6, when you click "Save and continue", Google might take you to a Scopes screen. You do not need to add any custom scopes for basic SSO; you can just scroll to the bottom and click "Save and continue" again to skip past it.
Step 7
Go to the page Credentials. Click at the top on Create credentials and choose the option Client-ID OAuth. Select for the application type Web application and fill in 'dialog-sso' as the name.
Step 8
In the Authorized redirect-URI's field, fill in the following two uri's:
- https://api.dialog.nl/api/sso/openidconnectcallback
- https://acceptance-api.dialog.nl/api/sso/openidconnectcallback
Step 9
Click on Create at the bottom. Now a pop-up screen will show with a Client-ID and a Client secret. Fill these in in the table below:
| Category | Answer |
| Client ID | |
| Client secret | |
| Email domain(s) for SSO | e.g. @dialog.com |
| Expiration date client secret | (Google Cloud OAuth client secrets do not expire for this type of Web application. You can safely fill in "N/A" or "Does not expire" in this box.) |
Step 10
Send the information from the previous step to your contactperson at Dialog. We will configure the SSO integration and test if the integration is set up succesfully.
Frequently asked questions
- What changes in the login flow when SSO is enabled in Dialog?
- Do I still need to invite new users to Dialog?
- Is two factor authentication possible when we use SSO?
- Can a user change his/her name, email address or password in Dialog after logging in with SSO?