infisical/docs/documentation/platform/sso/google.mdx

---
title: "Google SSO"
description: "Configure Google SSO for Infisical"
---

Using Google SSO on a self-hosted instance of Infisical requires configuring an OAuth2 application in GCP and registering your instance with it.

## Create an OAuth2 application in GCP

Navigate to your project API & Services > Credentials to create a new OAuth2 application.
    
![GCP API services](../../../images/sso/google/api-services.png)
![GCP create new OAuth2 application](../../../images/sso/google/new-app.png)

Create the application. As part of the form, add to **Authorized redirect URIs**: `https://your-domain.com/api/v1/sso/google`.

![GCP create new OAuth2 application form](../../../images/sso/google/new-app-form.png)

## Add your OAuth2 application credentials to Infisical
   
Obtain the **Client ID** and **Client Secret** for your GCP OAuth2 application.

![GCP obtain OAuth2 credentials](../../../images/sso/google/credentials.png)
   
Back in your Infisical instance, add two new environment variables for the credentials of your GCP OAuth2 application:

- `CLIENT_ID_GOOGLE_LOGIN`: The **Client ID** of your GCP OAuth2 application.
- `CLIENT_SECRET_GOOGLE_LOGIN`: The **Client Secret** of your GCP OAuth2 application.
   
  Once added, restart your Infisical instance and log in with Google