Google Workspace SSO

Steps

1. Navigate to login page
2. Observe Google sign-in button
3. Click Google sign-in button
4. Complete Google OAuth flow with an allowed domain email
5. Verify redirect to dashboard

Verify (6 checks)

• Google SSO button appears on login page
• Domain restriction message shown if GOOGLE_ALLOWED_DOMAINS is set
• Successful login with allowed domain email
• User auto-provisioned to default workspace if GOOGLE_DEFAULT_WORKSPACE_ID set
• Login rejected for non-allowed domain with clear error message
• Splunk log shows SSO login event

Steps

1. Navigate to Settings > SSO Settings
2. Review SSO configuration status
3. Check user statistics

Verify (5 checks)

• SSO settings page loads without errors
• Google SSO enabled/disabled status displayed correctly
• Allowed domains list shown
• User count breakdown (Google vs credentials) shown
• Default workspace info displayed if configured