[Solved] Using Gsuite to authenticate Redmine logins

I found: How to use OpenID-Connect with Gsuite Accounts? which is two years old, but I'm currently trying to do the same thing using Redmine 4.1.1.

I've spent some time wandering around in the dark, and feel like something should be possible by using the Redmine Omniauth Google plugin (https://github.com/twinslash/redmine_omniauth_google) and SAML Apps on the Gsuite console (search saml from admin.google.com).

Any pointers?

Replies (2)

RE: Using Gsuite to authenticate Redmine logins - Added by Kent Williams over 4 years ago

So, I managed to get this working - it was rather simple in the end.

Go to https://console.cloud.google.com/ and create a new project - I just called ours Redmine.
Click 'create credentials' and select 'OAuth client ID'

Select 'Web application' for the application type
Enter a name
Enter the main login address for the 'Authorised JavaScript origins', without any trailing /redmine or similar
Enter the main login address for the 'Authorised redirect URIs', with /oauth2callback at the end
Click create

Copy the 'Client ID' and 'Client Secret' into the Omniauth Google plugin configuration

You can then use the 'Login with Google' link that appears on the main Redmine login page to login!
We already had Redmine users with email addresses that lined up with our Gsuite addresses, so nothing further was needed.

Download all files

rm1.png (58.8 KB) rm1.png
rm2.png (61.6 KB) rm2.png
rm4.png (25 KB) rm4.png
rm3.png (68.1 KB) rm3.png

RE: Using Gsuite to authenticate Redmine logins - Added by Hunter Thompson about 4 years ago

Kent Williams wrote:

So, I managed to get this working - it was rather simple in the end.

Go to https://console.cloud.google.com/ and create a new project - I just called ours Redmine.

Click 'create credentials' and select 'OAuth client ID'

Select 'Web application' for the application type

Enter a name

Enter the main login address for the 'Authorised JavaScript origins', without any trailing /redmine or similar

Enter the main login address for the 'Authorised redirect URIs', with /oauth2callback at the end

Click create

Copy the 'Client ID' and 'Client Secret' into the Omniauth Google plugin configuration

You can then use the 'Login with Google' link that appears on the main Redmine login page to login!
We already had Redmine users with email addresses that lined up with our Gsuite addresses, so nothing further was needed.

Thanks for this guide here! Followed it and it worked like a charm, I was surprised at how easy it was. I thought I had to figure out some hacky fix to enable SSO.

(1-2/2)

Project

General

Profile

Redmine