Connect Google
Create an OAuth web client in Google Cloud, then connect it on Single Sign On. An account keeps one provider.
Consent screen
In Google Cloud Console, open APIs & Services, then OAuth consent screen. For a Workspace, choose Internal so only people in that organization can consent.
Create the client
Open Credentials, then Create credentials, then OAuth client ID. Choose Web application. Under Authorized redirect URIs, paste the redirect URI from Single Sign On in Settings. Create the client and copy the Client ID and Client secret.
Connect it
In Settings, open Single Sign On and choose Google. Paste the client ID and client secret. The Workspace domain is optional. Enter example.com to keep sign-in inside that domain. Connect. Saving a different provider replaces Google.