Overview

This document describes how to enable G Suite Authentication and the steps to be followed to configure G Suite authentication in OrangeHRM.

Version Information

Base OrangeHRM instance version: 6. X

Enabling G Suite Authentication for the Instance

Google configuration

• Start by going to https://console.developers.google.com/project/_/apiui/apis/library. If you are not logged in to your Google account, enter your credentials and log in.

• If you have not created any projects up to now, the ‘Select Project’ link will be

Displayed as in the image below.

• You can alternatively use an existing project or create a new project from the “Select a project”

• Click the Create button and wait for the project to be created.

• Select your newly created Project from the Projects drop-down at the top.

• Go to “Credentials” In the left sidebar under "APIs & Services"

• Configure Consent Screen

• Application Name - Name of the Instance Domain Name

  E.g.:- orangehrmlive.com Support Email - E.g.: test@orangehrm.us.com

Note: Don't edit the Application Homepage Link. We need to add Authorized domains and Application Name only, and save

• In the Application type section of the dialog, select Web application. 

Give the Authorized redirect URI field value as :

https://yourcompanyname-infinity.orangehrm.com/openidauth/openIdCredentials

Note: You must replace yourcompanyname in the URL with your actual company name

• Click the Create button.

• A pop-up “OAuth client “ will appear.

• Copy the client ID

• Copy the Client Secret

• Click OK

OrangeHRM Instance Configuration

• Log in as admin for the Intraway OrangeHRM instance and go to Admin->Configuration->Authentication.

• Press Add Provider to create a new Authentication provider. Google+ to be selected, and the below information to be added.

• Enter your preferred name in the Name field and enter the same URL you have added to 

Authorized redirect URIs (<OrangeHRM hostURL>/openidauth/openIdCredentials).

Then add the Client ID and Client Secret values, which were previously noted down. Add the Server

account key, which was previously noted down as the ID Developer Key, and save.

Adding Users to the OrangeHRM Instance

The authorized email addresses need to be used as the username of the login records in OrangeHRM

for Google+ authentication to work.