google sso screenshot shot list - GT-Edge-AI/GT-AI-OS GitHub Wiki

Google SSO Runbook — Screenshot Shot List

Drop finished PNGs into wiki/gen3-admin/images/ using exact filenames below.

Capture status (2026-06-19): GT Edge AI app shots captured automatically against https://ctp-gt3-proof.hackweasel.net / https://gt3-proof.hackweasel.net. GCP Console and Google account picker still require manual capture in your Google account.

Re-capture app shots anytime:

cd gt-ai-os
export KUBECONFIG="$PWD/kubeconfig-rke2.yaml"
node scripts/capture-google-sso-runbook-screenshots.mjs

Capture policy: Light mode, 1440px+ width where possible, crop sensitive values (OAuth client secret, live client IDs if policy requires).

Already captured (GT app — automated)

File Description
cp-sso-auth-runtime-tab.png Auth runtime callback URLs
cp-sso-users-cp-account.png Users → Control Panel accounts
cp-sso-users-tenant-account.png Users → Tenant accounts
cp-sso-providers-presets.png SSO preset starters grid
cp-sso-google-provider-form.png Google provider editor (MFA unchecked, both surfaces on)
cp-sso-validate-success.png Validate OK result
cp-sso-cp-login-google-card.png Control Panel login with Google card
cp-sso-cp-dashboard-success.png Signed-in Control Panel dashboard
cp-sso-tenant-login-google-card.png Tenant login with Google card
cp-sso-tenant-agents-success.png Signed-in tenant Agents page

Still manual

File Where
cp-sso-gcp-*.png (8 files) Google Cloud Console — see section A below
cp-sso-google-account-picker.png Click Continue with SSO on login; capture Google account chooser

A. Google Cloud Console (14 screenshots)

# Save as Navigation What must be visible
A1 cp-sso-gcp-apis-services-menu.png console.cloud.google.com → ☰ → APIs & Services Left menu with OAuth consent screen and Credentials visible
A2 cp-sso-gcp-oauth-consent-app-info.png APIs & Services → OAuth consent screen User type (Internal or External), app name, support email filled
A3 cp-sso-gcp-oauth-consent-scopes.png Same → Edit app → Scopes (or Scopes step) openid, userinfo.email, userinfo.profile listed
A4 cp-sso-gcp-oauth-consent-test-users.png Same → Test users Only if External user type — at least one test email added
A5 cp-sso-gcp-credentials-page.png APIs & Services → Credentials + Create credentials button and existing OAuth 2.0 Client IDs section
A6 cp-sso-gcp-create-oauth-client-type.png Create credentials → OAuth client ID Application type dropdown showing Web application selected
A7 cp-sso-gcp-oauth-redirect-uris.png Create/edit OAuth client form Authorized redirect URIs with both GT callback URLs pasted (use your real hostnames from GT Auth runtime)
A8 cp-sso-gcp-oauth-client-created.png After Create Client ID and Client secret visible (use fake/demo values in training captures)

Skip A4 if your consent screen is Internal (Workspace only). Note in reply: "Internal consent — skipped A4."

B. GT Edge AI Control Panel (9 screenshots)

Use your deployment Control Panel URL (for example https://ctp-gt3-proof.hackweasel.net).

# Save as Page / action What must be visible
B1 cp-sso-auth-runtime-tab.png SSO Providers → Auth runtime tab Control Panel + tenant upstream OIDC callback URLs and public URLs
B2 cp-sso-users-cp-account.png Users → Control Panel accounts Test operator row with email matching your Google test account
B3 cp-sso-users-tenant-account.png Users → Tenant accounts Test tenant user row with matching Google email
B4 cp-sso-providers-presets.png SSO Providers → Providers tab Preset grid including Google OIDC card
B5 cp-sso-google-provider-form.png Google OIDC preset editor (after Save or filled ready to save) Client ID field filled; ☑ Show on CP + tenant; ☐ Require GT two-factor after SSO
B6 cp-sso-validate-success.png SSO Providers after Validate Last validation result OK
B7 cp-sso-cp-login-google-card.png Control Panel /login (incognito) Google SSO card on login page
B8 cp-sso-cp-dashboard-success.png After CP Google SSO Dashboard loaded (signed-in state)

C. Google sign-in flow (1 screenshot)

# Save as When What must be visible
C1 cp-sso-google-account-picker.png During CP or tenant SSO, Google hosted page Google account chooser (email list or single account)

D. GT Edge AI Tenant App (2 screenshots)

Use your tenant app URL (for example https://gt3-proof.hackweasel.net).

# Save as Page / action What must be visible
D1 cp-sso-tenant-login-google-card.png Tenant /login (incognito) Google SSO card on tenant login
D2 cp-sso-tenant-agents-success.png After tenant Google SSO Signed-in tenant page (for example Agents heading)

Checklist before sending files

  • Both redirect URIs in A7 match B1 exactly (character-for-character)
  • B5 shows Require GT two-factor after SSO unchecked
  • B5 shows both Show on Control Panel login and Show on tenant login checked
  • A8 shows Client ID and Client secret (fake values OK for training docs)
  • All PNGs saved under wiki/gen3-admin/images/
  • Filenames match this list exactly (lowercase, hyphens)

Total: 22 screenshots (21 if Internal Google consent — skip A4)

When files are in place, ask to generate the PDF and the runbook will be assembled with embedded images.

⚠️ **GitHub.com Fallback** ⚠️