Configure the Google provider for portals

As explained in Configure an OAuth 2.0 provider for portals, Google is one of several identity providers that use the OAuth 2.0 protocol. To get started with configuring Google as the identity provider, select Configure from the provider settings page.

Configure the Google app.

Step 1. Create a Google app

To use Google as an identity provider, you need to create an app in Google with a redirect URL.

Note

The Reply URL is used by the Google app to redirect users to the portal after the authentication succeeds. If your portal uses a custom domain name, you might have a different URL than the one provided here.​

Important

Google+ API is deprecated. We strongly recommend that you migrate to Google People API.

To create an app in Google

  1. Open Google Developers Console.

  2. Create an API project, or open an existing project.

  3. Select Enable APIs and Services from the dashboard of APIs and Services.

  4. Search for and enable API Google People API.

  5. In Google APIs, select Credentials on the left pane.

    Note

    If you've already configured a consent screen with the portal's top-level domain, you can skip steps 6 through 14 and go directly to step 15. However, if your consent screen is configured but the portals' top-level domain hasn't been added, go through step 11 before you skip to step 15.

  6. Select Configure consent screen.

  7. Select the External user type.

  8. Select Create.

  9. Enter Application name, and upload an image for a logo if necessary.

  10. Select an appropriate Support email.

  11. Enter powerappsportals.com as the top-level domain in Authorized domains.

    Tip

    Use microsoftcrmportals.com if you haven't updated your Power Apps portal domain name. You can also enter a custom domain name if you have one configured.

  12. Provide links for home page, privacy policy, and terms of service as required.

  13. Select Save.

  14. Select Credentials from the left pane.

  15. Select OAuth client ID from the Create credentials drop-down menu.

  16. Select the application type as Web application.

  17. Enter a Name for the OAuth Client ID.

  18. Enter your Power Apps portal URL in the Authorized JavaScript Origins list.

  19. Enter Authorized redirect URIs as the Power Apps portal URL followed by /signin-google. For example, if the portal URL is https://contoso.powerappsportals.com, the Authorized redirect URIs field should be https://contoso.powerappsportals.com/signin-google.

  20. Select Create.

  21. Copy Client ID and Client secret from the OAuth client dialog box.

Step 2. Configure site settings

After you've created the app in Google, configure the site settings for the provider:

  • Client ID: A unique app ID generated by Google for your app.​
  • Client Secret: The client secret generated by Google for your app.

(Optional) Step 3. Additional settings

To configure Additional settings for the Google provider, see Configure additional settings for OAuth 2.0 providers.