Google SSO

Paramify supports login SSO via Google Workspace.

Within the Google Cloud console you can setup an OAuth Client ID for Paramify to support SSO using Google. See other login methods on the Login Overview.

Configure in Paramify Cloud (SaaS)

If you are using Paramify Cloud (app.paramify.com), no app registration is required. By default, Google SSO is already enabled for all new workspaces — your users can sign in with Continue with Google on the Paramify login page without any additional configuration.

To manage which login methods are available, navigate to Workspace Settings (gear icon, top right), click the Authentication tab, and review the Allowed Authentication Methods section. Toggles save automatically.

Configure in Self-Hosted

For self-hosted deployments, you must first create an OAuth Client ID in the Google Cloud console, then configure Paramify to use it.

Create an OAuth Client ID​

1. Sign in to the Google Cloud console as a user with Admin permissions for your domain
2. In the side navigation under APIs & Services click on Credentials
3. Click + CREATE CREDENTIALS near the top, then choose OAuth client ID
4. For the "Application type" choose Web Application
5. Enter an appropriate name (e.g., Paramify SSO)
6. Under Authorized JavaScript origins click + ADD URI then enter the URL to access Paramify similar to the following:
   • https://paramify.mycompany.com
7. Under Authorized redirect URIs click + ADD URI then enter the same URL to access Paramify plus /auth/callback, such as:
   • https://paramify.mycompany.com/auth/callback
8. Then click CREATE
9. On the OAuth Client created dialog copy the Client ID and Client secret for use later in configuration

Apply Configuration

Once the OAuth Client ID is created you can setup Paramify to use this with a few configuration options.

If you are using the Paramify Platform Installer then in the config GUI you can check the Enable Google SSO box then enter the Google Client ID and Google Client Secret that you collected from the creation above.

With a Helm-based install you can add the configuration options to your values.yaml in the configmaps.paramify.data section, similar to the following:

configmaps:
  paramify:
    data:
      AUTH_GOOGLE_ENABLED: "true"
      AUTH_GOOGLE_CLIENT_ID: "<client_id>"
      AUTH_GOOGLE_CLIENT_SECRET: "<client_secret>"

Be sure to replace the client_id and client_secret with the respective values from the OAuth client ID creation above.