# Google SSO

By default, Cortex uses Google as the Single Sign-On (SSO) authentication provider. Follow the instructions on this page to configure your own Google Cloud app for SSO to your Cortex workspace.

Cortex also supports an integration to track Google teams and team members as entity owners, pull in Service Level Objectives (SLOs) from Google Cloud Observability, and create Scorecards involving your Google resources and teams. See the [Google integration page](/ingesting-data-into-cortex/integrations/google.md) for more information.

## How to configure Google SSO for Cortex

You must have the `Configure OpenID Connector & SCIM` permission.

### Step 1: Set up a Google OAuth app

To set up a new Google OAuth app, follow [Google's OpenID Connect instructions](https://developers.google.com/identity/openid-connect/openid-connect).

### Step 2: Create an OAuth client ID in Google Cloud

1. In your Google Cloud instance, navigate to **APIs & Services**.
2. Click **Create Credentials**. Under Application type, select **Web application**
3. In the **Authorized redirect URI section**, add `https://cortexapp.auth0.com/login/callback` as an authorized [redirect URI](https://developers.google.com/identity/openid-connect/openid-connect#setredirecturi).
4. Click **Create**.
   * You will be redirected to the APIs & Services page. A modal will open with the client ID and secret.
5. Copy the client ID and client secret. Store these in a secure location, as you will need them in the next steps.

### Step 3: Configure SSO in Cortex

1. In your Cortex workspace, navigate to [**Settings > OpenID Connector**](https://app.getcortexapp.com/admin/settings/oidc).
2. Configure the form:
   * **Type**: Select `Google`.
   * **Identifier:** Enter the client ID from Step 2.
   * **Secret:** Enter the client secret from Step 2.
   * **Issuer:** Enter `https://accounts.google.com`.
3. At the bottom of the page, click **Save**.

After saving your configuration, users will only have the option to sign in to your Cortex workspace via your Google Cloud account.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cortex.io/configure/settings/managing-users/configuring-sso/google.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.