Let agents sign in with their Google Workspace accounts.
In Google Cloud Console → APIs & Services → Credentials, create an OAuth client ID (Web application).
Google Cloud ConsoleOpen Admin → Security & SSO and click Google Workspace under Quick setup — the issuer and scopes are prefilled.
Copy the callback URL shown on the page into your Google OAuth client’s Authorized redirect URIs.
Paste the Google client ID and secret, then turn SSO on.
A “Sign in with SSO” button now appears on the login page.