Single Sign On

Governor supports Single Sign On using OAuth2 with the following websites:

  • Google

  • Microsoft

  • GitHub

Also Google SAML authentication is possible.

Setting up OAuth2

For setting up OAuth2 single sign on, provide the necessary application properties for the respective clients. See Spring Boot reference for the documentation. Governor supports GitHub, Google and Microsoft via the following set of properties:

spring.security.oauth2.client.registration.github.clientid
spring.security.oauth2.client.registration.github.clientsecret
spring.security.oauth2.client.registration.github.redirecturi
spring.security.oauth2.client.registration.google.clientid
spring.security.oauth2.client.registration.google.clientsecret
spring.security.oauth2.client.registration.microsoft.clientid
spring.security.oauth2.client.registration.microsoft.clientsecret

Setting up clientid property for any of this will enable the respective icon on the authentication form.

Setting up SAML for Google

In order to set up SAML for, you have to provide a reference to metadata file in the following application property:

spring.security.saml2.relyingparty.registration.google.assertingparty.metadata-uri=file:/GoogleIDPMetadata.xml

The GoogleIDPMetadata.xml is provided when you set up a SAML application for your Google cloud domain.