Custom Google Identity Provider: Bread & Butter

Step 1

Log in to the Google Cloud Console:

https://console.cloud.google.com/

Step 2

At the top of the page, click Select a Project, then New Project.

Step 3

For Project name, enter your organization’s name.
For Organization, select your organization.
For Location, select your organization.

Click Create

Step 4

At the top of the page, change your project to the one you just created. If it's your first project, it should already be selected.

Step 5

In the left pane, click on APIs & Services, then OAuth consent screen.

Step 6

For User Type, choose External.
Click Create.

Note: For the Google Social Provider, please ensure that the application type is External. This allows any Google user to authenticate and log in. Internal restricts login to your domain only.

Step 7

For Application name, enter your organization’s name.
For Support email, enter your email address.
Leave the App Logo empty. A custom App Logo will require additional App validation when publishing your App. See the last step for more information.
Enter the remaining App domains fields for your organization as needed (please note that these can be changed later).
For Developer contact information, enter your email address.
Click Save and Continue.

Step 8

Click Add or Remove Scopes.
Select or manually add email, profile, and openid to scopes.
Click Update.
Click Save and Continue back on the main page.

Step 9

Click Add Users and add a user email address to test your app (optional).
Click Save and Continue.

Step 10

At the bottom of the page, click Back to Dashboard. Then, in the left menu, click on Credentials.

Step 11

Click Create credentials, and then select OAuth client ID.

Step 12

For Application type, select Web application.
For Name, enter your app name. We recommend entering your organization name.
For Authorized redirect URIs, enter:

https://api.breadbutter.io/callback
Click Create.

Step 13

In the dialog that appears, take note of the Client ID and Client Secret for the Bread & Butter setup below, or download the JSON.

Step 14

Bread & Butter Setup:

Go to https://app.breadbutter.io/sign-in/
Click Sign In and authenticate (or Sign Up make a new account and authenticate).
Go to Settings in the left menu.
Click on Google under SSO Settings > Social Accounts.
Select "Set Google for Production".
Enter a custom name and description.
Enter the Client ID from the Google setup steps above.
Enter the Client Secret from the Google setup steps above.
Click Save.
Click the checkbox next to your new Google provider to enable it.

Step 15

Log in to your app using the test user added in step 8.
In the left pane, click on Credentials.
Click Publish App to make your app available to any user with a Google account.

Step 16

You may still see breadbutter.io on the Google sign in window. To address this, you'll need to complete the Domain Proxy Setup