TABLE OF CONTENTS


Overview

This article provides the steps to set up Single Sign-On (SSO) between Google Workspace and Feefo Hub. Configuring this integration will allow users in your organisation to access Feefo services using their Google Workspace credentials.

Prerequisites

  • Domain Requirement: All users who will use SSO must have email addresses under the same domain associated with Google Workspace (e.g., @feefo.com).
  • Universal SSO: SSO will apply to all users within the domain. Excluding individual users is not supported.

Log in to Google Workspace

  1. Log in to your Google Workspace Admin Console.
  2. If needed, create a new project dedicated to Feefo’s SSO integration to keep settings organised.

Enable APIs and Services

  1. Navigate to APIs & Services.
  2. Select Credentials from the sidebar, and then OAuth client ID to set up a new OAuth client.

Configure OAuth Application

  1. Set the Application Type:
    • Select Web application.
  2. Enter Application Name:
    • Give the application a name, such as “Feefo Hub SSO.”
  3. Configure Authorized JavaScript Origins:
    • Add the required origins as prompted. (Reference the configuration example provided in Google’s instructions or use Feefo support documentation if unsure).

Configure Authorised Redirect URIs

  1. In the Authorized redirect URIssection, add the following URLs:
    • https://hub.feefo.com/login/callback
    • https://feefo.uk.auth0.com/login/callback
    • https://auth.feefo.com/login/callback
  2. Once the URIs are configured, click Create.

Note the Client ID and Secret

  1. After creation, a modal will display the Client ID and Client Secret:
    • Securely store these values as they will need to be provided to Feefo for the SSO connection.
  1. In the Google Console, select the newly created Feefo application.
  2. Go to the OAuth Consent screen:
    • Click Edit App to configure the consent screen details.
  3. Brand the Consent Screen:
    • Customise the consent screen’s App Name, Support Email, and Logo to align with your organization’s branding.
  4. Specify Required Scopes:
    • Feefo requires the following permissions:
      • openid (for user authentication)
      • Basic Profile Information (to access user profile details)
      • Email (to retrieve users’ email addresses)

After completing these steps, you will need to provide the following details to Feefo:

  • Client ID and Client Secret obtained from the OAuth credentials.
  • Domain Name (e.g., @feefo.com) used in Google Workspace to confirm the domain for SSO access.
  • Scopes that are enabled on your OAuth consent screen.

Following these instructions will enable SSO access for Google Workspace users within Feefo Hub, providing a seamless login experience. If you encounter any issues, Google’s documentation on Setting up OAuth 2.0 - API Console Help can provide additional guidance.