XCreds Setup with Google OIDC - Jukelyn/xcreds GitHub Wiki

To use XCreds with Google as the OIDC provider:

  1. Makes sure you use build 1276 or later of XCreds.

  2. Create a project or select an existing project in the google cloud console.

  3. go to API & Services-> Credentials.

  4. Create a consent screen by clicking the Configure Consent Screen:

consent screen

  1. Select User Type as Internal (or as appropriate for your organization):

User Type

  1. Fill out the App information with your organization appropriate info:

app info

  1. Leave Scopes empty:

scopes

  1. Go to the credential section and add an OAuth Client ID by clicking Create Credentials->OAuth Client ID

  1. Select the Web Application and the following details:

Application Type: Web Application

Name: XCreds

Redirect URL: https://127.0.0.1/xcreds

  1. copy client id and secret

  1. Create a profile and make sure to change the scope to not include offline access (scopes should be "profile openid" and to include the special shouldSetGoogleAccessTypeToOffline key.