Skip to main content

Google Single Sign-on

Select Manage SSO from workspace options

ToolJet - SSO configs

Select Google, Google login will be disabled by default

ToolJet - SSO configs

Enable Google. You can see Redirect URL generated

ToolJet - SSO configs

Go to Google cloud console and create a project.

ToolJet - Google create project

ToolJet - Google create client id

  • You'll be asked to select user type in consent screen. To allow only users within your workspace, select 'Internal', otherwise, select 'External'.

ToolJet - OAuth user type

  • You'll be led to an app registration page where you can set OAuth scopes. Select 'Add or remove scopes' and add the scopes and userinfo.profile as shown in the image. This will allow ToolJet to store the email and name of the user who is signing in

ToolJet - OAuth scope

  • Set the domain on which ToolJet is hosted as an authorized domain

ToolJet - authorized domain

Set the Redirect URL generated at manage SSO Google page under Authorised redirect URIs

ToolJet - authorized redirect urls

Lastly, set the client id in google manage SSO page. This value will be available from your Google cloud console credentials page

The Google sign-in button will now be available in your ToolJet login screen, if you are not enabled Multi-Workspace.


If you have enabled Multi-Workspace you can configure Google SSO as mentioned above, for setting default SSO for the instance use environment variable.


Redirect URL should be <host>/sso/google