Google OIDC Configuration

1. Log in to the Google Cloud Console at https://console.cloud.google.com/.

2. At the top of the page, click Select a Project or New Project.

3. In the left menu (or under Quick access on the page), click on APIs & Services, then OAuth consent screen.

4. In the User Type section, select Internal.

5. Fill in Application name and Support email fields, and click Save and Continue.

6. Add email, profile, and openid.

7. Click the Create credentials button, and select OAuth client ID.

8. Fill in the details below and click Create. Application Type: Web application Name: [Name of you application] Authorized redirect URIs: https://pbi.parallels.com/rbi/oidc/signin/callback This is the Parallels Browser Isolation redirect URL.

9. In the dialog that appears, copy the Client ID and Client Secret or download the JSON file.

10. Once the above steps are completed, copy the values which should mimic the table below, and paste them into the Parallels Browser Isolation IDP configuration section as shown below:

Settings	Value	Details
Domain	Ex: acme.com or parallels.com or <yourorgdomain.com>	The domain name should always match the value used in the email or UPN after the "@" symbol. [Ex; login using [e-mail] or [e-mail]]
Discovery URL	https://accounts.google.com/.well-known/openid-configuration	Copy this value from Google's IDP Settings. It should follow the format specified in the Value Column
Client ID	******************	Copy this value from Google's IDP Settings
Client Secret	******************	Copy this value from Google's IDP Settings
Username Claim Name	email	For more info visit; https://developers.google.com/identity/openid-connect/openid-connect
Groups Claim Name	groups	For more info visit; https://developers.google.com/identity/openid-connect/openid-connect

11. Click Save and proceed with adding users using the Admin Management section that was configured in the OIDC.