WATS Custom Single Sign On - Google

This article is a guide on how to create an application for WATS in Google and setting up credentials for accessing user information to provide Single Sign On for WATS.

We expect you to have read the main article, WATS Custom Single Sign On, before continuing with these steps.

• Navigate to https://console.cloud.google.com/
• Log in with your Google Account
• Either choose an existing project or create a new project. See Create Project (External link)
• Navigate to "APIs & Services"
• Open the "OAuth consent screen" tab
  • The following steps will possibly differ depending on whether the following application is made for external or internal users. These steps are listed for external users, but internal users are preferred.
  • Choose your user type
  • Under App Information, enter a name for the application and a support email. 
  • Under Authorized domains, click add domain and enter your WATS url. E.g. "myWATS.WATS.com"
  • Under Developer contact information, enter an email.
  • Click Save and Continue
  • Click Add or Remove scopes
  • Enable "openid", ".../auth/userinfo.email" and ".../auth/userinfo.profile". Click update.
  • Click Save and Continue
  • If testing, add an email address that has a user created in WATS, or create a WATS user and enter the same email address as a test user
  • Click Save and Continue
• Open the "Credentials" tab
  • Click Create Credentials
  • Click OAuth client ID
  • Under Application type, select Web Application. Enter a name for the application in Name.
  • Under Authorised redirect URIs, click Add URI.
  • Add a URI in this format: "https://{myWATSUrl}/default/CallbackCustomSso"
  • Click Create. Note: Redirect URIs can take up to a few hours to take effect.
  • In the next screen, save the Client ID and Client Secret. (Alternatively click Download JSON).
• The Authority Url to use is "https://accounts.google.com".