Thulium allows integration with Google to control access to the Thulium system within the Domain.
Scope of integration#
- Users can log into the Thulium system using the OpenID Connect mechanism provided by Google,
- Only Users who belong to a particular Organization (their email address is in a particular Domain) are synchronized,
- The system uses OpenID through a public application registered by Thulium,
- Identification of Users in the Thulium system is based on the email field registered with Google. This field is the login of the given User. The value of this field must be unique for each User.
Step by step#
1. Google integration in Thulium.#
a) Google account authentication integration should be launched in Administration → Advanced → Integrations from the Authentication group:
Once clicked, a screen with parameters to be completed will appear:
where:
- Domain - the address of the domain for which authentication will be conducted,
- Automatic user creation - turning this switch will allow the system to automatically create accounts for new Users who have properly authenticated with OpenID, even if their accounts have not yet been created in the system,
It is recommended to enable this feature only after setting the appropriate logins (email address) in Thulium for current Users so that when they log in, new ones are not assumed if they already exist (but with a different login).
- Users group - allows to import Users belonging to a group from Google before their first login to the system (e.g. callcenter@organization.pl).
b) After entering the configuration and clicking on , the login screen will show and the integration itself will be set as enabled: