Merge pull request #1009 from Infisical/google-github-sso-docs

Add Google and GitHub SSO configuration docs

docs/documentation/platform/sso/azure.mdx

@@ -3,6 +3,13 @@ title: "Azure SAML"
 description: "Configure Azure SAML for Infisical SSO"
 ---
 
+<Info>
+   Azure SAML SSO feature is a paid feature.
+   
+   If you're using Infisical Cloud, then it is available under the **Pro Tier**. If you're self-hosting Infisical,
+   then you should contact team@infisical.com to purchase an enterprise license to use it.
+</Info>
+
 1. In Infisical, head over to your organization Settings > Authentication > SAML SSO Configuration and select **Set up SAML SSO**.
    Next, copy the **Reply URL (Assertion Consumer Service URL)** and **Identifier (Entity ID)** to use when configuring the Azure SAML application.
 

docs/documentation/platform/sso/github.mdx

@@ -0,0 +1,37 @@
+---
+title: "GitHub SSO"
+description: "Configure GitHub SSO for Infisical"
+---
+
+Using GitHub SSO on a self-hosted instance of Infisical requires configuring an OAuth2 application in GitHub and registering your instance with it.
+
+## Create an OAuth application in GitHub
+
+Navigate to your user Settings > Developer settings > OAuth Apps to create a new GitHub OAuth application.
+
+![GitHub settings](../../../images/sso/github/settings.png)
+![GitHub developer settings](../../../images/sso/github/dev-settings.png)
+![GitHub create new OAuth application](../../../images/sso/github/new-app.png)
+
+Create the OAuth application. As part of the form, set the **Homepage URL** to your self-hosted domain `https://your-domain.com`
+and the **Authorization callback URL** to `https://your-domain.com/api/v1/sso/github`.
+
+![GitHub create new OAuth application form](../../../images/sso/github/new-app-form.png)
+
+<Note>
+    If you have a GitHub organization, you can create an OAuth application under it
+    in your organization Settings > Developer settings > OAuth Apps > New Org OAuth App.
+</Note>
+
+## Add your OAuth application credentials to Infisical
+
+Obtain the **Client ID** and generate a new **Client Secret** for your GitHub OAuth application.
+
+![GCP obtain OAuth2 credentials](../../../images/sso/github/credentials.png)
+
+Back in your Infisical instance, add two new environment variables for the credentials of your GitHub OAuth application:
+
+- `CLIENT_ID_GITHUB_LOGIN`: The **Client ID** of your GitHub OAuth application.
+- `CLIENT_SECRET_GITHUB_LOGIN`: The **Client Secret** of your GitHub OAuth application.
+   
+Once added, restart your Infisical instance and log in with GitHub.

docs/documentation/platform/sso/google.mdx

@@ -0,0 +1,30 @@
+---
+title: "Google SSO"
+description: "Configure Google SSO for Infisical"
+---
+
+Using Google SSO on a self-hosted instance of Infisical requires configuring an OAuth2 application in GCP and registering your instance with it.
+
+## Create an OAuth2 application in GCP
+
+Navigate to your project API & Services > Credentials to create a new OAuth2 application.
+    
+![GCP API services](../../../images/sso/google/api-services.png)
+![GCP create new OAuth2 application](../../../images/sso/google/new-app.png)
+
+Create the application. As part of the form, add to **Authorized redirect URIs**: `https://your-domain.com/api/v1/sso/google`.
+
+![GCP create new OAuth2 application form](../../../images/sso/google/new-app-form.png)
+
+## Add your OAuth2 application credentials to Infisical
+   
+Obtain the **Client ID** and **Client Secret** for your GCP OAuth2 application.
+
+![GCP obtain OAuth2 credentials](../../../images/sso/google/credentials.png)
+   
+Back in your Infisical instance, add two new environment variables for the credentials of your GCP OAuth2 application:
+
+- `CLIENT_ID_GOOGLE_LOGIN`: The **Client ID** of your GCP OAuth2 application.
+- `CLIENT_SECRET_GOOGLE_LOGIN`: The **Client Secret** of your GCP OAuth2 application.
+   
+  Once added, restart your Infisical instance and log in with Google

docs/documentation/platform/sso/jumpcloud.mdx

@@ -3,6 +3,13 @@ title: "JumpCloud SAML"
 description: "Configure JumpCloud SAML for Infisical SSO"
 ---
 
+<Info>
+   JumpCloud SAML SSO feature is a paid feature.
+   
+   If you're using Infisical Cloud, then it is available under the **Pro Tier**. If you're self-hosting Infisical,
+   then you should contact team@infisical.com to purchase an enterprise license to use it.
+</Info>
+
 1. In Infisical, head over to your organization Settings > Authentication > SAML SSO Configuration and select **Set up SAML SSO**.
    Next, copy the **ACS URL** and **SP Entity ID** to use when configuring the JumpCloud SAML application.
 

docs/documentation/platform/sso/okta.mdx

@@ -3,6 +3,13 @@ title: "Okta SAML"
 description: "Configure Okta SAML 2.0 for Infisical SSO"
 ---
 
+<Info>
+   Okta SAML SSO feature is a paid feature.
+   
+   If you're using Infisical Cloud, then it is available under the **Pro Tier**. If you're self-hosting Infisical,
+   then you should contact team@infisical.com to purchase an enterprise license to use it.
+</Info>
+
 1. In Infisical, head over to your organization Settings > Authentication > SAML SSO Configuration and select **Set up SAML SSO**.
    Next, copy the **Single sign-on URL** and **Audience URI (SP Entity ID)** to use when configuring the Okta SAML 2.0 application.
 

docs/documentation/platform/sso/overview.mdx

@@ -4,9 +4,11 @@ description: "Log in to Infisical via SSO protocols"
 ---
 
 <Warning>
-  Infisical currently has confirmed support for SAML SSO authentication with
-  Okta, Azure AD, and JumpCloud. We're expanding support for other IdPs in the
-  coming months, so stay tuned and feel free to request a IdP at this
+  Infisical offers Google SSO and GitHub SSO for free across both Infisical Cloud and Infisical Self-hosted.
+  
+  Infisical also offers SAML SSO authentication but as paid features that can be unlocked on Infisical Cloud's **Pro** tier
+  or via enterprise license on self-hosted instances of Infisical. On this front, we currently support Okta, Azure AD, and JumpCloud and
+  are expanding support for other IdPs in the coming months; stay tuned and feel free to request a IdP at this
   [issue](https://github.com/Infisical/infisical/issues/442).
 </Warning>
 
@@ -15,6 +17,8 @@ You can configure your organization in Infisical to have members authenticate wi
 To note, configuring SSO retains the end-to-end encrypted architecture of Infisical because we decouple the **authentication** and **decryption** steps. In all login with SSO implementations,
 your IdP cannot and will not have access to the decryption key needed to decrypt your secrets.
 
+- [Google SSO](/documentation/platform/sso/google)
+- [GitHub SSO](/documentation/platform/sso/github)
 - [Okta SAML](/documentation/platform/sso/okta)
 - [Azure SAML](/documentation/platform/sso/azure)
-- [JumpCloud SAML](/documentation/platform/sso/jumpcloud)
+- [JumpCloud SAML](/documentation/platform/sso/jumpcloud)

docs/mint.json

@@ -126,6 +126,8 @@
           "group": "SSO",
           "pages": [
             "documentation/platform/sso/overview",
+            "documentation/platform/sso/google",
+            "documentation/platform/sso/github",
             "documentation/platform/sso/okta",
             "documentation/platform/sso/azure",
             "documentation/platform/sso/jumpcloud"
@@ -150,6 +152,7 @@
         "self-hosting/configuration/envars",
         "self-hosting/configuration/email",
         "self-hosting/configuration/redis",
+        "self-hosting/configuration/sso",
         "self-hosting/faq"
       ]
     },

docs/self-hosting/configuration/sso.mdx

@@ -0,0 +1,20 @@
+---
+title: "Configure SSO"
+description: "How to configure SSO when self-hosting Infisical."
+---
+
+<Warning>
+  Infisical offers Google SSO and GitHub SSO for free.
+  
+  Infisical also offers SAML SSO authentication but as paid features that can be unlocked via enterprise license; if this is of interest, please contact team@infisical.com.
+  On this front, we currently support Okta, Azure AD, and JumpCloud and are expanding support for other IdPs in the coming months; stay tuned and feel free to request a IdP at this
+  [issue](https://github.com/Infisical/infisical/issues/442).
+</Warning>
+
+You can view specific documentation for how to set up each SSO authentication method below:
+
+- [Google SSO](/documentation/platform/sso/google)
+- [GitHub SSO](/documentation/platform/sso/github)
+- [Okta SAML](/documentation/platform/sso/okta)
+- [Azure SAML](/documentation/platform/sso/azure)
+- [JumpCloud SAML](/documentation/platform/sso/jumpcloud)