Google SSO

By default, Cortex uses Google as the Single Sign-On (SSO) authentication provider. Follow the instructions on this page to configure your own Google Cloud app for SSO to your Cortex workspace.

Cortex also supports an integration to track Google teams and team members as entity owners, pull in Service Level Objectives (SLOs) from Google Cloud Observability, and create Scorecards involving your Google resources and teams. See the Google integration page for more information.

How to configure Google SSO for Cortex

You must have the Configure OpenID Connector & SCIM permission.

Step 1: Set up a Google OAuth app

To set up a new Google OAuth app, follow Google's OpenID Connect instructions.

Step 2: Create an OAuth client ID in Google Cloud

1. In your Google Cloud instance, navigate to APIs & Services.

2. Click Create Credentials. Under Application type, select Web application

3. In the Authorized redirect URI section, add https://cortexapp.auth0.com/login/callback as an authorized redirect URI.

4. Click Create.

   • You will be redirected to the APIs & Services page. A modal will open with the client ID and secret.

5. Copy the client ID and client secret. Store these in a secure location, as you will need them in the next steps.

Step 3: Configure SSO in Cortex

1. In your Cortex workspace, navigate to Settings > OpenID Connector.

2. Configure the form:

   • Type: Select Google.

   • Identifier: Enter the client ID from Step 2.

   • Secret: Enter the client secret from Step 2.

   • Issuer: Enter https://accounts.google.com.

3. At the bottom of the page, click Save.

After saving your configuration, users will only have the option to sign in to your Cortex workspace via your Google Cloud account.