# Configuring Google OAuth for Backstage in Roadie

> How to configure a Google OAuth client for Roadie

*Last validated: 2021-10-11T15:15:00.0Z | Published: 2021-10-11T15:15:00.0Z*


## At a Glance

|                            |                                                                                                  |
| -------------------------: | ------------------------------------------------------------------------------------------------ |
|          **Prerequisites** |                                                                                                  |
|         **Considerations** | This assumes you have access to your google cloud console                                        |
| **Supported Environments** | ☐ Private Network via Broker <br /> ☐ Internet Accessible via IP Whitelist <br /> ☒ Cloud Hosted |

## Introduction

This Google OAuth client will allow Backstage to authenticate your user using your own controlled Google client.

## Steps

### Step 1: Creating an OAuth app

1. Sign into your GCP [console](https://console.cloud.google.com/apis/credentials)

2. Select the `APIs & Services` -> `Credentials`. Now click on the `Create Credentials` button, followed by `OAuth client ID`

![OAuth client ID](./client-id.webp)

3. From the dropdown menu select `Web application`, then name it something like 'Roadie OAuth client'.

4. Click on the `Add URI` button under the `Authorized JavaScript origins` and enter the name of your roadie backstage instance (eg. https://<yourcompany>.roadie.so))

5. Click on the `Add URI` button under the `Authorized redirect URIs` and enter the name of your roadie backstage instance followed by the following path: `/api/auth/google/handler/frame` (eg. https://<yourcompany>.roadie.so/api/auth/google/handler/frame)

![urls](./urls.webp)

6. Save + store client secret and ID for later

![Secrets](./secrets.webp)

### Step 2: Adding secrets to backstage

1. Navigate to ”https://<tenant-name>.roadie.so/administration/secrets”

2. Using the Secret from step 1, click the pencil marker for the following field `GOOGLE_CLIENT_SECRET` and save.

3. Using the client id from step 1, click the pencil marker for the following field `GOOGLE_CLIENT_ID` and save.

## Conclusion

After adding the the OAuth client to your Backstage instance, you will be able to authenticate against Google so that you can read resources on your cloud platform.