Google SSO Setup

This guide covers setting up Single Sign-On (SSO) with Google for Welkin Health. Once configured, care team members can log in to Welkin using their Google account.

Note: While setting up this configuration, it is best to have two browser tabs open — one with Welkin Admin and one with Google Cloud.

Prerequisites

• A Google Cloud account (existing or new). Use your company domain's Admin account if available.
• Welkin Admin portal access
• A Welkin user account with a Google email address already created

Step 1: Create a user and enable SSO in Welkin Admin

1. In Welkin Admin, create a user with a Google account email address (or use an existing one)
2. Turn on Single Sign-On for that user from the user profile settings
3. In Admin, go to Security Settings → turn on Single Sign-On (Status = Active) → select Google as the Provider type

Step 2: Set up a project in Google Cloud

1. Go to console.cloud.google.com and sign in
2. Click Agree and Continue
3. Select a project → New Project → enter a project name, leave Location as "No Organization" → click Create
4. Wait for the project to be created and click Select Project

Step 3: Configure OAuth consent screen

1. Navigate to API and Services → Credentials
2. Click Configure Consent Screen
3. Select User Type External (or Internal to limit to users in your organization) → click Create
4. Fill in your App name and User support email
5. Scroll to Authorized domains → click Add Domain
6. In Welkin Admin → Security Settings → click Instructions → copy the Authorized Domain
7. Paste the domain into Google Cloud → fill in developer contact information → click Save and Continue
8. Skip the Scopes tab → click Save and Continue
9. Under Test users, click Add users → add the user created in Step 1 → click Add → Save and Continue
10. Click Back to Dashboard

Step 4: Create OAuth credentials

1. Go to Credentials → Create Credentials → OAuth Client ID
2. Select Web application → enter any name → click Add URI
3. In Welkin Admin → Security Settings → Instructions → copy Authorized JavaScript origin → paste into Google Cloud
4. In Welkin Admin → copy Authorized redirect URI → change saml2 to oauth2 in the URL → paste into Google Cloud
5. Click Create
6. Copy the Client ID and Client Secret from Google Cloud

Step 5: Save credentials in Welkin Admin

1. In Welkin Admin → Security Settings → SSO settings → paste the Client ID and Client Secret
2. Click Save

Step 6: Test

Click Log in with Google → select the test account → confirm login is successful.

---

More Questions? Contact [e-mail] or your Implementation/CSM directly.