> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ownid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Sign-In

> Integrate Google Sign-In into your OwnID authentication screens

<img width="200" src="https://mintcdn.com/ownid/R0Wddcq9zgBDU03F/images/google/aireuropa-google.png?fit=max&auto=format&n=R0Wddcq9zgBDU03F&q=85&s=4aa76c77ca7625da00e4d4c70c44a860" alt="Google Example" data-path="images/google/aireuropa-google.png" />

This guide walks you through the steps to set up Google Sign-In as an identity provider within the OwnID platform, offering a secure and frictionless login experience.

## Prerequisites

Before you begin, ensure you have the following:

* A Google Cloud account with access to the [Google Cloud Console](https://console.cloud.google.com/).
* An OwnID account and access to the [OwnID Console](https://console.ownid.com/).

## Step 1 - Create a Google OAuth Client ID

1. Go to [Google Cloud Console](https://console.cloud.google.com/auth/overview) and select your project (create one if needed).
2. Go to [Branding page](https://console.developers.google.com/auth/branding), make sure all of the information is complete and accurate.
3. Go to [Clients page](https://console.developers.google.com/auth/clients) and create a new client:

   * Select Application Type `Web application`.

   <img width="500" src="https://mintcdn.com/ownid/R0Wddcq9zgBDU03F/images/google/1_clients.png?fit=max&auto=format&n=R0Wddcq9zgBDU03F&q=85&s=f09599ff18bc56a67856020a590cf654" alt="Create client" data-path="images/google/1_clients.png" />

   * Give it a meaningful name.
   * Leave *Authorized JavaScript origins* empty.
   * In the *Authorized redirect URIs*, enter your [custom domain](/explore/custom-domain), followed by the path `/oidc/callback`, so for example `https://passwordless.acme.com/oidc/callback`. If a custom domain was not configured yet, you can enter `https://passwordless.ownid.com/oidc/callback`.
   * Click **Create**.
   * Save the created `Client ID` and `Client Secret` values, you will use them later in this guide.

**Optional: Native Apps Integration**

If you're building a native Android or iOS app, you'll need to create additional clients:

* **iOS** - Create a separate OAuth 2.0 Client ID with Application type set to iOS and specify your app's `bundle ID` and `team ID`.
* **Android** - Create a separate OAuth 2.0 Client ID with Application type set to Android in the Google Cloud Console. Provide your app's `package name` and `SHA-1 fingerprint`.

## Step 2 - Configure Google Credentials in OwnID

Go to the OwnID console, `Authentication` > `Social Providers`:

* Toggle on `Google Sign in`.

  <img width="500" src="https://mintcdn.com/ownid/R0Wddcq9zgBDU03F/images/google/google-toggle.png?fit=max&auto=format&n=R0Wddcq9zgBDU03F&q=85&s=1494401f3b70f47263ff043773bd0e69" alt="Google toggle" data-path="images/google/google-toggle.png" />

<Note> By default, OwnID testing credentials are provided, but they are strictly for development use only. Follow this tutorial to configure your own Google credentials for production. </Note>

* Click **configure** and enter the following values in the modal:

  <img width="500" src="https://mintcdn.com/ownid/R0Wddcq9zgBDU03F/images/google/google-console-settings.png?fit=max&auto=format&n=R0Wddcq9zgBDU03F&q=85&s=10b628a07ac0fbfa145fb4d93383ec4c" alt="Google console settings" data-path="images/google/google-console-settings.png" />

  * **Client ID** - enter the value from `Web application` client.
  * **Client Secret** - enter the value from `Web application` client.
  * **iOS - Client Secret** - enter the value from `Android` client. (optional)
  * **Android - Client Secret** - enter the value from `iOS` client. (optional)

* **Save** your configurations.
