Introduction

Google Single Sign-On (SSO) allows users to securely access openSIS using their Google account credentials. This not only enhances security but also simplifies the login experience for students, teachers, and administrators.

This guide walks you through the updated steps to configure Google SSO in openSIS using Google Cloud Console.

Step 1: Login to Google Cloud Console

Go to:
👉 https://console.cloud.google.com/apis/credentials

Step 2: Create a New Project

1. Go to the Credentials section.

2. Click on “Create Project”.

Step 3: Name the Project

Enter a suitable Project Name that reflects your institution or app purpose.
Click Create to proceed.

Step 4: Access OAuth Consent Screen

After the project is created, a screen will appear.
Click on any navigation button or link to proceed to the OAuth consent screen setup.

Step 5: Start the Consent Screen Setup

Click “Get Started” on the consent screen setup page.

Step 6: Configure App Info and Audience

1. Enter your App Name and User Support Email.

2. Choose the Audience (e.g., External for most use cases).

3. Fill in Developer Contact Information.

4. Click Finish to save the configuration.

🔗 Before proceeding, please review Google’s App Branding Policy

Step 7: Create OAuth Client

Go back to the Credentials page and click “Create Credentials → OAuth Client ID”.

Step 8: Select Application Type

Choose “Web application” as the type.

Step 9: Configure App Settings

1. Enter a Name for your application.

2. Under Authorized JavaScript origins, input your school’s openSIS URL (e.g., https://school.opensis.com).

3. Under Authorized redirect URIs, enter the following openSIS redirect URLs:
   https://<your-school-subdomain>.opensis.com
   https://<your-school-subdomain>.opensis.com/auth/callback
4. Click Create.
   

Step 10: Copy Client ID and Client Secret

After creation, Google will generate:

• Client ID

• Client Secret

Copy and save these values securely.

Step 11: View Application in Clients List

Your created application will appear in the list of OAuth 2.0 clients.

Step 12: Access App Details Again

Click the App Name in the client list to reopen the detail page if you need to view the Client ID or Secret later.

Step 13: Configure SSO in openSIS

1. Log in to openSIS as an Admin.

2. Navigate to Settings → SSO Settings.

3. Select Google SSO.

4. Enter the Client ID and Client Secret copied earlier.

5. Click Save.

Final Output

Your users will now see a “Sign in with Google” button on the login screen, enabling instant access via Google credentials.

Troubleshooting Tips

• ✔ Make sure your JavaScript Origin matches the openSIS domain exactly.

• ✔ Your domain must be included in Authorized Domains in the consent screen.

• ✔ Check that server time is accurate to avoid token issues.

Need Help?

If you face any issues, feel free to contact our support team at opensishelp@os4ed.com.