Use Google Cloud as an identity provider for Altostrat, allowing users to authenticate with their Google account. This guide shows how to create a Google Cloud Project, enable OAuth 2.0, and integrate it with Altostrat.

​
Prerequisites

  • A Google Cloud account or existing project.
  • Admin rights in Altostrat to configure integrations.

​
Part 1: Google Cloud Setup

1

Create or Select a Google Cloud Project

  1. Go to the Google Cloud Console.
  2. Click Select a Project or New Project if you need a fresh project.
  1. Name the project (e.g., “Altostrat Auth”) and confirm creation.
  1. Wait for the project to be created.
2

Enable OAuth Credentials

  1. In the left-hand menu, choose APIs & Services → Credentials.
  1. Click + Create Credentials → OAuth client ID.
3

Configure the Consent Screen

If not set up, Google prompts you to configure an OAuth Consent Screen.
  • Choose External (if public) or Internal (if limited to your org’s domain).
  • Fill out app information, then save.
4

Create OAuth Client ID

  1. Select Web application as the application type.
  1. Under Authorized redirect URIs, add: https://auth.altostrat.app/callback
  2. Click Create. Copy the generated Client ID and Client Secret.
If you have specific domain verification or branding requirements, complete those steps in the OAuth Consent Screen configuration.

​
Part 2: Altostrat Integration

1

Open Altostrat Integrations

From the Altostrat dashboard, choose Captive portal → Identity Providers.
2

Select Google Cloud

Look for a Google Cloud or Google option. Fill in the Client ID and Client Secret from your GCP project.
3

Save & Test

Confirm settings and attempt a test sign-in to verify functionality.

​
Troubleshooting

  • OAuth Errors Ensure your Client ID and Client Secret are correct. Mismatched callback URLs can cause redirect_uri_mismatch errors.
  • Consent Screen Issues If users see a warning that the app isn’t verified, finalize the OAuth consent process in Google Cloud.
  • Check Orchestration Logs If Altostrat reports authentication errors, check the Orchestration Log or Google Cloud’s APIs & Services → Credentials logs for details.

​
Updating or Removing the Integration

  1. Google Cloud Under APIs & Services → Credentials, edit or delete the OAuth client if you need to rotate secrets.
  2. Altostrat In Integrations, remove or update the Google Cloud entry, which immediately affects user logins via Google.
Removing this integration will prevent any user relying on Google OAuth from logging in. Make sure you have an alternate login method or user in place.