From 6195b98472e8c0857b0b4fe0c8d9095add6e9da0 Mon Sep 17 00:00:00 2001 From: Eric Knibbe Date: Wed, 8 Jul 2026 13:11:26 -0400 Subject: [PATCH] add steps for creating Client ID for Google Auth --- Enabling-SSO-support-using-OpenId-Connect.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/Enabling-SSO-support-using-OpenId-Connect.md b/Enabling-SSO-support-using-OpenId-Connect.md index 1b336c5..869187b 100644 --- a/Enabling-SSO-support-using-OpenId-Connect.md +++ b/Enabling-SSO-support-using-OpenId-Connect.md @@ -208,7 +208,12 @@ Google [Documentation](https://developers.google.com/identity/openid-connect/ope \ By default without extra [configuration](https://developers.google.com/identity/protocols/oauth2/web-server#creatingclient) you won´t have a `refresh_token` and session will be limited to 1h. -Configure your server with : +In _Google Auth Platform > Clients_, create a new Client ID with: + +- Authorized JavaScript origins: `https://vaultwarden.example.tld` +- Authorized redirect URIs: `https://vaultwarden.example.tld/identity/connect/oidc-signin` + +Then configure your server with: - `SSO_AUTHORITY=https://accounts.google.com` - `SSO_AUTHORIZE_EXTRA_PARAMS="access_type=offline&prompt=consent"`