Skip to main content
This sets up sign-in for your instance. It does not connect a repository or send project notifications.

​
Register the application

Open the Google developer console. Choose a Google Cloud project, configure its OAuth consent screen and audience, and create an OAuth client of type Web application. Add the address below as an authorized redirect URI. If the app is in testing, add the people who will test it to the allowed test users. For a bundled Kaneo deployment at https://kaneo.example.com, the callback is:
Use your own hostname. If the API is hosted separately, use its public origin instead. The callback path is /api/auth/callback/google; do not append a second /api when your API URL already includes it. For provider-specific options, see the official OAuth guide.

​
Configure Kaneo

Add the values from the provider to your server’s .env:
Apply the change to the bundled deployment:

​
Test sign-in

Open Kaneo in a private browser window and choose the Google sign-in option. Complete authorization and confirm you return to Kaneo. If the provider reports a redirect mismatch, compare the full URL, including the scheme, hostname, port, and path. If sign-in succeeds but joining a workspace fails, check the invitation email and instance registration settings.

​
Turn it off

Remove the two environment variables and recreate Kaneo. Make sure people have another way to sign in before disabling the provider. Review access settings before enforcing SSO-only access.