# OAuth Plugin Requirements

## Overall Process

For companies that are using **Google Workspace**, you can use `SpaceONE's oAuth plug-in` to simplify user login procedures. To do this, you need to work on the following in advance.

* [Create OAuth Client ID](#create-oauth-client-id)
* [Domain Verification](#domain-verification)

## Create OAuth Client ID

SpaceONE needs the OAuth Client ID to access companies Google workspace. To do this, you need to add the followings to your Google workspace in advance.

* Create OAuth Client ID
* Add JavaScript Origin
* Add Redirect URL

**STEP 1: Log in Google Cloud Console > API**

Go to *Credentials* and click **`+CREATE CREDENTIALS`**

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXW8rWkJ48wKZx17i8W%2F-MXW9K_ZZy5N9yPOKGR7%2Fimage.png?alt=media\&token=3680d0cc-4743-47d7-b354-baa06ba401cc)

**STEP 2: Select the *****Application type***** as `Web application` and fill the name of your web client ID.**

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXW8rWkJ48wKZx17i8W%2F-MXWBaBXfkM5Z49escsJ%2Fimage.png?alt=media\&token=47a35198-cc76-4f19-a962-3118a8fe96a6)

**STEP 3: Add Authorized JavaScript origins**

This is for use with requests from your browser with *SpaceONE* URI. Write according to your company's own *SpaceONE URI* received from *SpaceONE admin*. URI is likely to be in format of`https://xxx.console.spaceone.dev`

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXW8rWkJ48wKZx17i8W%2F-MXWCtx2KfguH1Mxvl9x%2Fimage.png?alt=media\&token=521489a2-3fc3-4243-9f7a-cdd060db8cf2)

**STEP 4 : Add Authorized redirect URIs.**

This step is for use with redirect from your browser to SPACEONE Sign-in page. Write according to your company's own SpaceONE Sign-in URI. URI is likely to be in format of `https://xxx.console.spaceone.dev/sign-in`

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXW8rWkJ48wKZx17i8W%2F-MXWD0SI6E9T5cFEmTw0%2Fimage.png?alt=media\&token=b6213388-851b-4e9f-8e3c-07d9161271da)

After you create your OAuth client, you will get your Client ID and Client Secret. 

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXWEH9WEg-aRfiN5amS%2F-MXWF009caB8euqZKqCe%2Fimage.png?alt=media\&token=d2861958-8e0e-43e5-b07d-fead84e8beb9)

## Domain Verification

You should proceed with domain authentication to allow API requests from `spaceone.dev` domains.

**STEP 1: Go to *****Domain Verification***** and click `+Add domain`**

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXWF4fBXFfY8JiljHaH%2F-MXWFq3oNXpg-2myMVPk%2Fimage.png?alt=media\&token=b1e822e6-f2eb-4156-93d5-0c62b9521aed)

**STEP 2: Enter SpaceONE console URI**

You should allow webhook notifications for SpaceONE Domain console URI. Write according to your company's own *SpaceONE URI* received from *SpaceONE admin*. URI is likely to be in format of`https://xxx.console.spaceone.dev`

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXWF4fBXFfY8JiljHaH%2F-MXWFlTOcMZ1hhquSm11%2Fimage.png?alt=media\&token=941d7ed2-b999-43f8-ab48-eb30e1832c79)

**STEP 3: Verify Ownership** 

Before you register SpaceONE domain, you should verify ownership in advance. The process holds on *Google Search Console*. Click `TAKE ME THERE`

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXWGN7Rj_obU2vSCftq%2F-MXWH2Ta9SD9Qoiiju3u%2Fimage.png?alt=media\&token=a869c0ed-29d3-4fa3-b871-a48bf12acd7d)

**STEP 4: To complete verifying domain ownership of SpaceONE, Click `Confirm` on two pages below.** 

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXWGN7Rj_obU2vSCftq%2F-MXWHCDO3ZvkD31w0X9r%2Fimage.png?alt=media\&token=95533a44-eeb2-4e03-8a55-803fe51cc290)

![](https://2935649719-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTreeWoy3xuY-l6nGnL%2F-MXWHYheVlcAyuFyLG5B%2F-MXWHlkeiTRvAn1T4flN%2Fimage.png?alt=media\&token=04fddf24-bd82-40db-bb1b-ee7a62e3c913)