diff --git a/Enabling-SSO-support-using-OpenId-Connect.md b/Enabling-SSO-support-using-OpenId-Connect.md
index 1b336c5..869187b 100644
--- a/Enabling-SSO-support-using-OpenId-Connect.md
+++ b/Enabling-SSO-support-using-OpenId-Connect.md
@@ -208,7 +208,12 @@ Google [Documentation](https://developers.google.com/identity/openid-connect/ope
 \
 By default without extra [configuration](https://developers.google.com/identity/protocols/oauth2/web-server#creatingclient) you won´t have a `refresh_token` and session will be limited to 1h.
 
-Configure your server with :
+In _Google Auth Platform > Clients_, create a new Client ID with:
+
+- Authorized JavaScript origins: `https://vaultwarden.example.tld`
+- Authorized redirect URIs: `https://vaultwarden.example.tld/identity/connect/oidc-signin`
+
+Then configure your server with:
 
 - `SSO_AUTHORITY=https://accounts.google.com`
 - `SSO_AUTHORIZE_EXTRA_PARAMS="access_type=offline&prompt=consent"`