Google Workspace
Generally AvailableYour workforce signs in to Ferentin with their Google Workspace accounts. Ferentin acts as an OIDC relying party, so it never sees or stores their passwords.
- SSO
- OIDC
- Enterprise
- Protocol
- OIDC with PKCE
- Configured in
- Google Cloud console
- Setup time
- About 10 minutes
- Passwords
- Never seen by Ferentin
What you get
Sign in from Ferentin
People type their work email at Ferentin and are sent to Google Workspace to authenticate.
Email domain routing
The domain of a work email decides which identity provider signs that person in.
Multi-factor authentication
Your Google Workspace MFA policies run before Ferentin issues a session.
How it works
Setup is a ten-minute exchange between the Ferentin admin console and Google Cloud. Ferentin shows your redirect URL with a copy button; you create a Web application OAuth client in Google Cloud and paste it in as an authorized redirect URI. Google issues a client ID and secret, which you bring back to Ferentin. Google's discovery document is fixed, so Ferentin reads it the moment you move on and the endpoints fill themselves.
Set the app's audience to Internal in Google Cloud and only accounts in your Workspace organization can complete sign-in. People start at Ferentin, where the domain of the email address they type routes them to Google. Suspend or delete a user in the Google Admin console and they can no longer sign in.
Signing in opens the Ferentin admin console, so add each person on the Administration page by their Google Workspace email before their first sign-in.
Step-by-step setup
Full setup guide
About Google Workspace
Google Workspace is Google's suite of cloud productivity and collaboration tools. Its accounts carry your organization's identity, with 2-Step Verification and sign-in policy managed in the Google Admin console.
Frequently asked about Google Workspace
- What does the Google Workspace integration do?
- Google Workspace signs your people in to Ferentin, so every AI request carries a verified identity. It supports SP initiated SSO, email domain routing and MFA.
- How is Google Workspace access secured?
- The Google Workspace integration is covered by OIDC, PKCE, MFA enforcement and session management.
- How do I connect Google Workspace to Ferentin?
- Open the Ferentin admin console and add Google Workspace as an identity provider over OIDC. You exchange a few values between the Google Workspace and Ferentin consoles, and Ferentin checks the configuration before it is saved.
- Is the Google Workspace integration generally available?
- Yes. The Google Workspace integration is generally available on Ferentin, including the free tier.
Related integrations
3
Okta
Enterprise identity and access management platform with SSO and directory services.
Microsoft Entra ID
Microsoft's cloud identity service for SSO, MFA, and conditional access policies.
Auth0
Flexible identity platform with universal login and extensive customization options.