# Google SSO

By default, Cortex uses Google as the Single Sign-On (SSO) authentication provider. Follow the instructions on this page to configure your own Google Cloud app for SSO to your Cortex workspace.

Cortex also supports an integration to track Google teams and team members as entity owners, pull in Service Level Objectives (SLOs) from Google Cloud Observability, and create Scorecards involving your Google resources and teams. See the [Google integration page](https://docs.cortex.io/ingesting-data-into-cortex/integrations/google) for more information.

## How to configure Google SSO for Cortex

You must have the `Configure OpenID Connector & SCIM` permission.

### Step 1: Set up a Google OAuth app

To set up a new Google OAuth app, follow [Google's OpenID Connect instructions](https://developers.google.com/identity/openid-connect/openid-connect).

### Step 2: Create an OAuth client ID in Google Cloud

1. In your Google Cloud instance, navigate to **APIs & Services**.
2. Click **Create Credentials**. Under Application type, select **Web application**
3. In the **Authorized redirect URI section**, add `https://cortexapp.auth0.com/login/callback` as an authorized [redirect URI](https://developers.google.com/identity/openid-connect/openid-connect#setredirecturi).
4. Click **Create**.
   * You will be redirected to the APIs & Services page. A modal will open with the client ID and secret.
5. Copy the client ID and client secret. Store these in a secure location, as you will need them in the next steps.

### Step 3: Configure SSO in Cortex

1. In your Cortex workspace, navigate to [**Settings > OpenID Connector**](https://app.getcortexapp.com/admin/settings/oidc).
2. Configure the form:
   * **Type**: Select `Google`.
   * **Identifier:** Enter the client ID from Step 2.
   * **Secret:** Enter the client secret from Step 2.
   * **Issuer:** Enter `https://accounts.google.com`.
3. At the bottom of the page, click **Save**.

After saving your configuration, users will only have the option to sign in to your Cortex workspace via your Google Cloud account.