# SSO Configuration - GCP (Google)

## SSO Configuration Process for using the FinOps Platform

#### Welcome to Pier Cloud!

Pier Cloud is our centralized platform for managing cloud data and services. Our priority is to ensure that access to resources is secure, convenient, and efficient. This document was elaborated to guide you through setting up access to Pier Cloud via Single Sign-On (SSO).

This guide covers the steps required to set up SSO with Pier Cloud, including integration with external identity providers such as Google Cloud Provider. You'll find detailed instructions, along with screenshots and examples, to make the setup process easier.

If you have any questions during the setup process or need additional assistance, please don’t hesitate to contact our support team. We are here to help ensure a smooth transition to SSO access and maximize the benefits that Pier Cloud offers.

#### Below are the steps required to configure SSO using the GCP provider:

1. Go to <https://console.cloud.google.com> and access the GCP portal:

{% hint style="info" %}
Enter your email and password.
{% endhint %}

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FfqvQWLrptwKpsoOg87q5%2Fimage.png?alt=media&#x26;token=a1f38f72-9849-4617-8551-0d77d24a26d5" alt=""><figcaption></figcaption></figure>

2. Here in the search field look for API and Services:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FSdazubfNe8wuitkzMbOM%2Fimage.png?alt=media&#x26;token=72ded49f-716a-4f5f-bed2-aa5f6e26f1aa" alt=""><figcaption></figcaption></figure>

3. After finding the name APIs and Services, click on it, as illustrated in the image below:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FI9Gxbk4pVYykxgCPf8lv%2Fimage.png?alt=media&#x26;token=e147b06f-6c2a-4830-89dd-0e946a64e645" alt=""><figcaption></figcaption></figure>

4. In this step, we will select the project where SSO will be configured, we will use the engineering-team project as an example.

{% hint style="info" %}
In this example, we will use an existing project. However, if you do not have one or prefer to create a specific project for this configuration, this decision is at the client's discretion.
{% endhint %}

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2F5Dys87N350voGndopmJN%2Fimage.png?alt=media&#x26;token=e9cbe2fe-0348-4c6f-a99f-03bfbda82fcf" alt=""><figcaption></figcaption></figure>

5. Here select the Project, where we will configure the SSO, in this case we will use the engineering-team project, as an example:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2Fi2Fasn1YedFYwTse0gfw%2Fimage.png?alt=media&#x26;token=31505564-5b90-4794-877d-7314635ac49b" alt=""><figcaption></figcaption></figure>

6. Here click on **Branding**, as illustrated in the image below:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FKwgtBjFrpf7P11UQsPoN%2Fimage.png?alt=media&#x26;token=055bbd34-fc63-439b-b2b2-98a22cb43bbc" alt=""><figcaption></figcaption></figure>

* Here add the App Name and email for user support as illustrated in the image below:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FPSpvQ7J2SXVllCMN16EL%2Fimage.png?alt=media&#x26;token=32bd7cb7-3917-4e52-9868-cdf4cf7c2970" alt=""><figcaption></figcaption></figure>

* Continuing with the configuration, we will add the application's home page address, authorized domains and the developer's contact details, then click Save, as illustrated in the image below:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FVHqBn2IeYFLmj3SxdACX%2Fimage.png?alt=media&#x26;token=bad7984c-d3d0-42fc-a92e-05ae19463163" alt=""><figcaption></figcaption></figure>

7. Now in the menu on the left click on **Customers**, then click on **+ Create customer**:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FzhMQ3HjRY6xR0POvb6zU%2Fimage.png?alt=media&#x26;token=8d69b00b-d0d5-48d8-8684-04ff082d2eea" alt=""><figcaption></figcaption></figure>

8. Here in the **Application Type** field, choose the **Web Application** option, as illustrated in the image below:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FESIYu9inx5FmQ4xTKTor%2Fimage.png?alt=media&#x26;token=50c02257-fe1a-4540-ac67-1dec4da3e8e0" alt=""><figcaption></figcaption></figure>

9. Here enter the Client identification name (e.g.: Test\_SSO), and add the redirect URLs, as illustrated in the image below.

{% hint style="info" %}
This information is sent by PierCloud.
{% endhint %}

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FO0fUoiDb4Hu1sjrGXhwv%2Fimage.png?alt=media&#x26;token=4f1da6dc-c08b-4446-9b84-284a22d7da30" alt=""><figcaption></figcaption></figure>

10. After clicking on create, this window will appear, click on Download JSON, to download the client ID and key (Secret):

{% hint style="info" %}
This information must be sent to PierCloud.
{% endhint %}

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2F2M36kb6YLKYv3QSBRO0z%2Fimage.png?alt=media&#x26;token=976d6d54-080b-4e1c-a3fa-52be93d43e92" alt=""><figcaption></figcaption></figure>

11. Done, the client has been successfully created! Now click on **Data Access** in the menu on the left:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FcCiKppxVAYeTxEqE9vQG%2Fimage.png?alt=media&#x26;token=c6d993f9-4d97-454f-ad06-d7c43fe7b9d5" alt=""><figcaption></figcaption></figure>

12. Here click on **Add or remove scopes** as illustrated in the image below.

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2F0diUx8p5bmw79HkVr5dU%2Fimage.png?alt=media&#x26;token=9f635715-6ef6-49d6-b9aa-df012e5375c0" alt=""><figcaption></figcaption></figure>

13. Here select the 3 marked options:
    1. See the primary email address for your Google account,
    2. See your personal information, including information you’ve made publicly available,
    3. Associate your personal information with you on Google.

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FjIYB3vtlOYFDoJxfDJXp%2Fimage.png?alt=media&#x26;token=054985c7-d3af-41ad-bec6-e98a5bcb1bed" alt=""><figcaption></figcaption></figure>

14. Okay, these permissions are what you need to make the SSO connection:

<figure><img src="https://1687673077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZ9sinLUl52lDK1vg6b8g%2Fuploads%2FpUDOG0xJoZxMxR7MVzb2%2Fimage.png?alt=media&#x26;token=ca9b761a-3482-4d6c-95a7-94a836f99520" alt=""><figcaption></figcaption></figure>

15. That's it, the setup is complete. Below is a summary of the information you need to send to Pier Cloud.
    * The JSON file that was generated in Step 10.

Done! The configuration for single sign on using Google Cloud Provider has been successfully completed.
