SSO Authentification

[MohamedKhattat]

Select Topic Area

Question

Body

how could i use SSO with google sign-in for accessing to metabase dashboard with single authentification

[buu-huu]

Heres a quick how-to:

Prerequisites

1. Metabase: Ensure that you have Metabase installed and running.
2. Google Developer Account: You need access to a Google Developer account to set up OAuth2 credentials.

Step-by-Step Guide

Step 1: Create Google OAuth2 Credentials

1. Go to the Google Cloud Console.
2. Create a new project or select an existing project.
3. Navigate to APIs & Services > Credentials.
4. Click on Create Credentials and select OAuth 2.0 Client IDs.
5. Configure the OAuth consent screen:
   • Provide application name, logo, and other details.
   • Add scopes (e.g., email, profile) if required.
   • Configure authorized domains.
6. Set up the OAuth client ID:
   • Application type: Select "Web application".
   • Authorized redirect URIs: Add the redirect URI for your Metabase instance. This typically looks like https://your-metabase-domain/auth/google_oauth2/callback.
7. Save the credentials and note down the Client ID and Client Secret.

Step 2: Configure Metabase for Google SSO

1. Open your Metabase instance and log in with an admin account.
2. Go to Admin Settings > Authentication.
3. Enable Google as a sign-in method.
4. Enter the Client ID and Client Secret obtained from the Google Cloud Console.
5. Save the settings.

Step 3: Testing the Integration

1. Log out of your Metabase instance.
2. On the Metabase login screen, you should now see an option to sign in with Google.
3. Click on the Sign in with Google button.
4. Authenticate using your Google account.
5. If the configuration is correct, you should be redirected to the Metabase dashboard.

Optional: Restrict Access to Specific Domains

To restrict access to only users from a specific Google domain (e.g., your organization), you can set up domain restrictions in Metabase:

1. Go to Admin Settings > Authentication.
2. Look for domain restrictions and specify the allowed domains.

[MuhamedHabib]

insightful .. thanks for your guidance .. glad to announce that my problem has resolved!