Download the PHP package dmlab/module-admin-sso-google without Composer

On this page you can find all versions of the php package dmlab/module-admin-sso-google. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Informations about the package module-admin-sso-google

DmLab_AdminSsoGoogle

Google Workspace login for the Magento 2 admin panel.

License Magento PHP Version

A thin Google provider plugin for the provider-agnostic admin-sso capability. It supplies the Google OIDC preset — a fixed discovery URL, default scopes, optional hosted-domain restriction, login-button branding — while all OIDC protocol lives in sso-core and all admin logic in admin-sso. Installing it pulls admin-sso and sso-core automatically.

Installation

Create the Google OAuth 2.0 client

In the Google Cloud Console → APIs & Services → Credentials:

  1. Create credentials → OAuth client ID, application type Web application.
  2. Authorized redirect URI — the admin-sso callback: https://<admin-host>/<admin-path>/adminsso/sso/callback (<admin-path> is the backend frontName, default admin). It must match the admin URL used at runtime exactly.
  3. Create, then copy the Client ID and Client secret.

No discovery/tenant configuration is needed — Google exposes a single, tenant-independent OIDC discovery document (https://accounts.google.com/.well-known/openid-configuration).

Configuration

Admin → Stores → Configuration → DMLab → Admin SSO.

General (dmlab_admin_sso/general/*):

Field Value
Enable Admin SSO Yes
Identity Provider Google Workspace
Client ID from the Google OAuth client
Client Secret from the Google OAuth client

Google Workspace (dmlab_admin_sso/google/*, shown when Google is selected):

Field Value
Allowed Workspace Domain optional; restrict sign-in to one Workspace domain, e.g. example.com

When Allowed Workspace Domain is set, sign-in is enforced against Google's hd (hosted-domain) claim: accounts outside the domain — including personal Google accounts, which carry no hd — are rejected on callback. Leave it empty to allow any Google account.

Enforce-SSO/break-glass are configured in admin-sso; see that module's README.

No groups in the Google token — role mapping limitation

Google Workspace does not include group membership in the OIDC ID token. There is no groups claim over standard OIDC, so admin-sso's group → ACL-role mapping cannot resolve from a Google login: a provisioned admin falls back to the default role configured in admin-sso. The practical Google control is who may sign in (the Allowed Workspace Domain above), not what role they get.

Fetching group memberships would require the Google Admin SDK Directory API (a service account with domain-wide delegation) — out of scope for v1.

Requirements

Part of the DMLab identity suite

Repo Role
sso-core Shared OIDC engine (installed automatically)
admin-sso · admin-sso-<idp> Admin-panel SSO login
customer-sso · customer-sso-<idp> Storefront SSO login
admin-scim · admin-scim-<idp> Admin-user provisioning (SCIM 2.0)

License

https://dmlab.work.

All versions of module-admin-sso-google with dependencies

PHP Build Version
Package Version
Requires php Version ~8.3.0||~8.4.0||~8.5.0
magento/framework Version >=103.0
dmlab/module-admin-sso Version ^0.1.1
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package dmlab/module-admin-sso-google contains the following files

Loading the files please wait ...