MicroStrategy ONE

Integrate OIDC Support with Google

Starting in MicroStrategy ONE (September 2024), you can integrate OpenID Connection (OIDC) support with Google.

Google does not expose an OAuth scope to obtain user groups as part of the OIDC flow. Therefore, MicroStrategy can not retrieve group information for Google users and can not map Google groups to MicroStrategy administrator groups.

Create Application

  1. Sign in to Google Cloud Console.

  2. Under APIs & Services, click Credentials.

  3. Click Create Credentials and select OAuth client ID.

  4. If your application runs on multiple platforms, each platform will need its own client ID.

Create Web OAuth Client ID

  1. In the Create OAuth client ID dialog, under Application type, select Web application.

  2. In Name, type an application name.

  3. Under Authorized redirect URIs, enter the Library URL and add /auth/oidc/login to the end of the URL, as shown below.

    https://env-xxxxxx.customer.cloud.microstrategy.com/MicroStrategyLibrary/auth/oidc/login

  4. Click Create.

Create iOS OAuth Client ID

  1. In the Create OAuth client ID dialog, under Application type, choose iOS.

  2. In Name, type an application name.

  3. In Bundle ID, enter your application bundle ID.

  4. Click Create.

Create Android OAuth Client ID

  1. In the Create OAuth client ID dialog, under Application type, choose Android.

  2. In Name, type an application name.

  3. In Package name, type an application package name.

  4. In SHA-1 certificate fingerprint, enter the SHA-1 certificate fingerprint.

  5. Expand Advanced Settings and select the checkbox next to Enable custom URI scheme.

  6. Click Create.

Create Workstation OAuth Client ID

  1. In the Create OAuth client ID dialog, under Application type, choose Desktop app.

  2. In Name, type an application name.

  3. Click Create.

Configure MicroStrategy Library in Workstation

  1. Open Workstation and connect to the Library environment using standard authentication with an administrator user.

  2. Right-click on the environment and choose Configure Enterprise Security.

  3. In Select an identity provider, choose Google Cloud Identity.

Configure Web Client

  1. In Client ID and Client Secret, enter the values from the client you created in Create Web OAuth Client ID.

  2. The Library Web URI is generated automatically. Ensure you add this URI to the Authorized redirect URLs in the client you created in Create Web OAuth Client ID.

  3. In Scopes, enter your required scopes.

  4. In Additional Parameter, type access_type and offline.

Configure iOS Client

  1. In Client ID, enter the value from the client you created in Create iOS OAuth Client ID.

  2. In Redirect URI Scheme, enter the iOS URL scheme from the iOS client you created in Create iOS OAuth Client ID.

  3. In Scopes, enter your required scopes.

Configure Android Client

  1. In Client ID, enter the value from the client you created in Create Android OAuth Client ID.

  2. In Package Name, enter the Package name from the client you created in Create Android OAuth Client ID.

  3. In Scopes, enter your required scopes.

Configure Workstation Client

  1. In Client ID and Client Secret, enter the values from the client you created in Create Workstation OAuth Client ID.

  2. In Scopes, enter your required scopes.

Enable OIDC Auth Mode for MicroStrategy Library

  1. Go to the Library Admin page. For example, https://env-xxxxxx.customer.cloud.microstrategy.com/MicroStrategyLibrary/admin.

  2. In the navigation pane, click Library Server.

  3. In Authentication Modes, choose OIDC and click Create Trusted Relationship.

  4. Log in and deselect Standard.

  5. Click Save.

For more information, see Enable OIDC Authentication for MicroStrategy Library