
Admin Google SSO
This Magento 2 module means that you can sign up to your admin person account utilizing your Google account. You may also configure to have admin accounts created routinely when somebody logs in with their Google account.
Setting up your OAuth credentials:-
Install Google SSO library utilizing following composer command:
php -dmemory_limit=4G /usr/bin/composer require league/oauth2-google
Visit the Google Developer Console to create your OAuth credentials.
Visit the "Credentials" part
Click "Create credentials"
Choose "OAuth Client ID"
Choose the "Web utility" utility kind.
When requested for "Authorized Redirect URIs", enter the URL given under, substituting https://example.com/admin/ along with your Magento 2 administrator web page.
Redirect URI: https://example.com/admin/google_sso/auth/callback
After you arrange your OAuth 2 credentials, login to your Magento backend and navigate to Stores > Configuration > Advanced > Admin > Google SSO.
Change the module's standing to "Enabled".
Enter the Client ID you created within the Google Developer Console.
Enter the Client Secret you created within the Google Developer Console.
Click Save
After your configuration saves, clear your retailer’s cache if essential. The subsequent time you go to the Magento 2 backend login web page, you need to see a button to Sign in with Google.
Auto Registration
You can allow “Auto Registration” which permits customers with entry to sure Google accounts to routinely have admin accounts created for them. This is very helpful for companies who’ve a number of staff logging right into a consumer’s admin.
You have the next accessible filter choices:
Only permitting particular e-mails
Allowing any e-mails in a website
Allowing any e-mails that match an everyday expression
Disabling password authentication
You can disable the power for a person to login to their admin account utilizing a password routinely if they’re registered utilizing Google SSO by toggling the setting “Allow Auto-Registered Users To Use Password Login”. This is very helpful in case you are in an work surroundings the place when an worker loses their work e-mail, they need to now not be allowed to entry consumer admin accounts.
This will also be toggled on a per-user foundation, even when the person was not initially created utilizing the auto-register function.