@@ -676,7 +676,33 @@ For Github, please follow the instructions mentioned here `"Setting up OAuth 2.0
676676In any OAuth 2.0 configuration admin has to use the redirect URI "http://<management server IP>:<port>/#/verifyOauth"
677677
678678.. Note :: [Google OAuth 2.0 redirect URI] :
679- Google OAuth 2.0 configuration wont accept '#' in the URI, please use "http://<management server IP>:<port>/verifyOauth"
679+ Google OAuth 2.0 configuration wont accept '#' in the URI, please use "http://<management server Domain>:<port>/?verifyOauth"
680+ Google does not accept direct IP address in the redirect URI, it must be a domain. As a workaround one can add the management
681+ server IP to host table in the local system and assign a domain, something like "management.cloud". In that redirect URI looks like
682+ "http://management.cloud:8080/?verifyOauth"
683+
684+ .. image :: /_static/images/oauth-provider-registration.png
685+ :width: 400px
686+ :align: center
687+ :alt: OAuth provider registration
688+
689+ Following are the details needs to be provided to register the OAuth provider, this is to call the API "registerOauthProvider"
690+
691+ - **Provider **: Name of the provider from the list of OAuth providers supported in CloudStack
692+
693+ - **Description **: A short description for the provider
694+
695+ - **Provider Client ID **: Client ID pre-registered in the specific OAuth provider
696+
697+ - **Redirect URI **: Redirect URI pre-registered in the specific OAuth provider
698+
699+ - **Secret Key **: Secret Key pre-registered in the specific OAuth provider
700+
701+ Cloudmonkey API call looks like
702+
703+ - register oauthprovider provider=google description="Google Provider"
704+ clientid="http://345798102268-3kp6qd6c16v6b9av2tmvqagj40na30l4.apps.googleusercontent.com"
705+ redirecturi="http://local.cloud:8080/?verifyOauth" secretkey="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"
680706
681707Email address is the key to identify the user in CloudStack. In case if user belongs to any specific domain, domain name
682708has to be provided in the login form and then click on OAuth login.
0 commit comments