Administration Guide

How to Set Up Google SSO

This guide shows you how to enable Sign in with Google for users of your AlloyScan site. Google is a built-in provider that must first be allowed at the instance level by a Global Administrator. After that, a Site Administrator can turn it on for the current site.

Prerequisites

  • You have the Administrator role on the AlloyScan site.
  • A Global Administrator has already allowed Google SSO for the instance.
  • Users who will sign in with Google already have Active user records on the site (their Email in IAM > Users matches the Google account email).

Steps

1. Open the site SSO providers page

  1. Navigate to Admin Center > Site Settings > IAM > SSO providers.
  2. Make sure the Google row is visible.

2. Enable Google for the site

  1. Turn the Google toggle to ON.
  2. Click Save.

Verify

  1. Open a private or incognito browser window and navigate to your AlloyScan site sign-in page.
  2. Confirm that a Sign in with Google button is now displayed below the email and password fields.
  3. Click the button and complete the Google sign-in. If your Workspace enforces 2-Step Verification, that step happens here.
  4. After redirect back to AlloyScan, you should land on the site Dashboard.
  5. Open Admin Center > Site Settings > Logs > Security log. The successful sign-in is recorded as a login event.

Note: If the user's email does not match an Active record in IAM > Users, the sign-in fails after the Google step. Add or activate the user in IAM > Users and retry.

Common pitfalls

  • Google row not visible. Google SSO has not been allowed for the instance. Ask a Global Administrator to allow Google SSO in Admin Center > App management > IAM > SSO providers.
  • Toggle is off. Google is allowed on the instance, but not yet enabled for the site.
  • Inactive account. The Google account email must match an Active AlloyScan user record.