GCP SSO Integration

Step 1: Create OAuth 2.0 Credentials on GCP

1. Go to the Google Cloud Console.
2. Navigate to APIs & Services → Credentials.
3. Click Create Credentials → OAuth Client ID.
4. Select Web Application as the application type.
5. Enter a name for your client (e.g., Cokpit SSO Client).
6. Under Authorized redirect URIs, add your Cokpit redirect URL (for example: https://app.cokpit.io/auth/callback).
7. Click Create.
8. Copy the generated Client ID and Client Secret.

💡 Tip: Store your Client Secret securely — you’ll need it when adding the integration to Cokpit.

Step 2: Add GCP SSO Integration in Cokpit

1. Open Cokpit → Integrations → Cloud Provider → GCP SSO.

2. Click Add Integration.

3. Fill in the required fields:

   • Secret Name: A unique name for your GCP SSO secret (e.g., gcp-sso-secret)
   • Project ID: Your Google Cloud Project ID (e.g., my-gcp-project)
   • Client ID: The OAuth 2.0 Client ID you created
   • Client Secret: The OAuth 2.0 Client Secret

4. Click Select (or Save) to complete the setup.

Security Best Practices

• Use OAuth 2.0 best practices for token handling.
• Rotate your Client Secrets periodically.
• Restrict OAuth credentials to trusted domains.
• Monitor GCP audit logs for authentication and access events.
• Follow Google Identity security recommendations.
• Never commit Client Secrets to source control.