SSO protocol
Realaml uses OpenID Connect (OIDC) built on OAuth 2.0 for Google Single Sign-On. This is a standard, secure identity protocol supported natively by Google Workspace.
Step 1: Open SSO settings in Realaml
Log in to the Realaml dashboard as an admin.
Go to Settings.
Select the SSO tab.
Ensure Single Sign-On (SSO) is enabled.
Select Google as the provider.
Step 2: Open Google Cloud Console
In the SSO section, click Google Cloud Console.
If you do not already have a Google Cloud project, you will be prompted to create one.
Step 3: Create a Google Cloud project
Click Create project.
Enter a project name (for example:
Realaml SSO).Select the appropriate Organisation and Location.
Click Create.
Step 4: Navigate to OAuth credentials
In Google Cloud Console, go to APIs & Services.
Select Credentials.
Click Create credentials.
Choose OAuth client ID.
If prompted, you will need to configure the OAuth consent screen first.
Step 5: Configure the OAuth consent screen
Click Configure consent screen.
You will be taken to the Branding section.
Click Get started.
App information
Enter an App name (for example:
Realaml).Enter a User support email.
Audience
Select Internal.
This restricts access to users within your Google Workspace domain.
Click Next.
Note: Internal only works for Google Workspace domains. Consumer @gmail.com accounts are not supported.
Contact information and consent
Enter a contact email address.
Review the details.
Accept the Google API Services User Data Policy.
Click Create.
Step 6: Create an OAuth client ID
After the consent screen is created, click Create OAuth client.
For Application type, select Web application.
Enter a name (for example:
Realaml Web App SSO).
Authorized redirect URI
1 - Under Authorized redirect URIs, click Add URI.
2 - Copy the Redirect URL shown in the Realaml SSO settings.
Example:
Your redirect URL may differ depending on your Realaml region. Always copy the value shown in the Realaml SSO settings.
3 - Paste it into Google Cloud.
Authorized JavaScript origins (recommended)
Add the value that matches your Realaml region:
New Zealand (NZ)
Australia (AU)
Canada (CA)
4 - Click Create.
Step 7: Copy Client ID and Client Secret
Click the newly created OAuth client.
Copy the Client ID.
Copy the Client Secret.
Step 8: Complete setup in Realaml
Return to the Realaml dashboard.
In Settings > SSO, paste:
Client ID
Client Secret
Click Save configuration.
Enter your Realaml password to confirm.
Once saved, Google SSO will show as Active.
Step 9: Test Google SSO login
Log out of the Realaml dashboard.
On the login page, enter your email address.
Click Next.
Select your Google account when prompted.
Approve access.
You will be redirected back to the Realaml dashboard.
How SSO works for your team
Once enabled, Google SSO applies to all users in your firm who log in with a Google Workspace account.
Users no longer need a Realaml password.
Access is controlled by your Google Workspace domain.
Do you support SAML?
Realaml does not currently support SAML-based Single Sign-On.
We support OpenID Connect (OIDC) for Google Workspace SSO, which is a modern, secure identity standard built on OAuth 2.0 and supported natively by Google. For most customers using Google Workspace, OIDC is the recommended and preferred approach.
If you need help or run into any issues, contact Realaml support via Intercom or email support@realaml.com