Nextiva Contact Center - Google OAuth SSO Configuration

OAuth (Open Authorization) is an open standard for token-based authentication and authorization, which is used to provide single sign-on (SSO). OAuth allows an end user's account information to be used by third-party services without exposing the user's password.

Google SSO works via OAuth 2.0, configured in the Google Cloud Platform under APIs and Services. We need to configure an app in the “Oauth consent screen” and a set of credentials for this Web application (Client ID and Client Secret). These credentials need to be added to the Single Sign-On configuration at the tenant level.

1. Create and configure an OAuth 2.0 Client ID. 
   
   
   1. In the Credentials section of the API & Services view of the Google Cloud Platform, create a new Client ID for the Web application.
      
      
      
      
      
      
   2. Inside the newly created client’s credentials set up the Authorized redirect URIs, for example:
      
      
      
      
   3. From the detail view of the Client Id for Web Application, copy the Client ID and Client secrets, they will be needed for the Thrio Tenant configuration.
      
      
   4. In the “OAuth consent screen” section of the API & Services view of the Google Cloud Platform, configure the consent screen for this Google Project.
      
      
   5. The necessary scopes to configure in this consent screen are:
      
      
      1. opened
         
         
      2. ./auth/userinfo
         
         
      3. .email
         
         
2. Configure Google SSO in the NCC Tenant.
   
   
   1. Write each one of the values from the OAuth 2.0 Client ID, In the NCC Tenant object, in the Google Single Sign-On tab. Click the Enable Single Sign-On toggle button to see the other field
      
      
      
      
      1. The default user lookup field to be configured is “email”.
         
         
3. To trigger the SSO Oauth process, go to the following URL, and replace the variables between double braces with their respective values:
   
   {{baseURL}}/provider/oauth2/authorization/google/{{TenantId}}
   
   baseURL corresponds to the domain of the URL address used to login to the NCC application. An example of a baseURL is: https://nextiva.thrio.io