.svg)
Google OAuth SSO: Secure single sign-on with Flexopus
With Google OAuth SSO integration, your employees can log in to Flexopus directly with their Google account – without separate passwords or additional login details. Access can be specifically restricted to authorized domains.
What is the Google OAuth SSO integration?
Google OAuth SSO stands for Single Sign-On based on the OAuth 2.0 protocol. This interface allows users to authenticate with their existing Google account at Flexopus without having to enter a separate password.
Upon first registration, Flexopus automatically creates a user profile with name and email address. Each subsequent registration will be verified via Google. Administrators can then assign roles and groups.
A key security feature is the domain whitelist: Only users with email addresses from specified domains are granted access to Flexopus. This keeps access to your organization restricted.
What is the purpose of integration?
The Google OAuth SSO integration simplifies the login process for all employees who already work with Google Workspace. Instead of remembering separate login details for Flexopus, they simply use their usual Google account.
Typical use cases:
- Employees can log in with one click via their Google account – no additional password is required.
- New users are automatically created in Flexopus upon their first login, without any manual effort from administrators.
- Access can be restricted to specific email domains to prevent unauthorized access.
- Optionally, the classic email/password login can be deactivated, so that only SSO is used.
How easy is the integration?
Setting up Google OAuth SSO in Flexopus is straightforward and requires no technical expertise. In the Flexopus dashboard, administrators navigate to the authentication settings, select Google SSO as the provider, and define the allowed domains.
After saving, the configuration can be tested directly in the incognito window. The entire setup can be completed in just a few minutes.
Ready to start? For complete step-by-step setup instructions, please visit our Help Center.
What are the advantages of integration?
- Easy registration: Employees use their existing Google account – no additional password is required.
- Automatic user creation: New users are automatically created in Flexopus upon their first login.
- Controlled access: Thanks to domain whitelisting, only authorized email addresses can access Flexopus.
- Increased security: Two-factor authentication (2FA) is automatically enabled if it is active in the Google account.
- Reduced administrative overhead: Admins don't have to manage or reset passwords.
- Included free of charge: Integration is included in Flexopus at no extra cost.
Further integrations
.svg)
questions and answers
Can anyone with a Google account sign up for Flexopus?
No, not automatically. Administrators use the domain whitelist to determine which email domains are allowed. Only users with a valid email address will be granted access. An open configuration for all Google users is possible, but not recommended.
What happens when an employee leaves the company?
If an employee's Google account is deactivated or removed from the allowed domain, the person will no longer be able to log in to Flexopus. Additionally, the administrator can manually deactivate or delete the user profile in Flexopus.
Is two-factor authentication (2FA) supported?
Yes. If 2FA is mandatory in the user's Google account or in Google Workspace, it will be automatically requested during the login process. Flexopus does not need to configure anything separately for this.
Can I also disable the classic password login?
Yes. Once Google SSO is set up and tested, administrators can disable email/password login in the Flexopus settings. This makes SSO the only login option. For emergencies, an alternative login path for an admin user will be retained.
Does Flexopus recommend Google OAuth SSO, or is there a better alternative?
Google OAuth SSO is a simple and quick solution to set up. For companies that need even tighter control over who is allowed to log in, Flexopus recommends connecting via Google SAML2 SSO. This option allows access to be strictly restricted to users who are registered in the Identity Provider (Google Workspace).