Documenso

Setting up OAuth Providers

Learn how to set up OAuth providers for your own instance of Documenso.

Google OAuth (Gmail)

To use Google OAuth, you will need to create a Google Cloud Platform project and enable the Google Identity and Access Management (IAM) API. You will also need to create a new OAuth client ID and download the client secret.

Create and configure a new OAuth client ID

Open Google Cloud Console

Go to the Google Cloud Platform Console and select a project or create a new one from the projects list.

Open APIs & services

From the console's left side menu, select APIs & services (if not already open).

Open Credentials

On the left, click Credentials.

Create OAuth client ID

Click New Credentials, then select OAuth client ID. When prompted, select Web application.

Name and create the client

Enter a name for your client ID and click Create. Click the download button to download the client secret.

Set authorized origins and redirect URIs

Set:

  • Authorized JavaScript origins: https://<documenso-domain>
  • Authorized redirect URIs: https://<documenso-domain>/api/auth/callback/google

Set environment variables

In your Documenso environment, set:

NEXT_PRIVATE_GOOGLE_CLIENT_ID=<your-client-id>
NEXT_PRIVATE_GOOGLE_CLIENT_SECRET=<your-client-secret>

Finally verify sign-in with Google by signing in with your Google account and checking the email address in your profile.

Microsoft OAuth (Azure AD)

To use Microsoft OAuth, you will need to create an Azure AD application registration in the Microsoft Azure portal. This will allow users to sign in with their Microsoft accounts.

Create and configure a new Azure AD application

Open Azure Portal

Go to the Azure Portal and navigate to Azure Active Directory (or Microsoft Entra ID in newer portals).

Start app registration

In the left sidebar, click App registrations, then New registration.

Name and choose account types

Enter a name (e.g. "Documenso").

Under Supported account types, select both:

  • Accounts in any organizational directory (Any Azure AD directory - Multitenant)
  • Personal Microsoft accounts (e.g. Skype, Xbox)

This allows any Microsoft account to sign in.

Set redirect URI and register

Under Redirect URI, select Web and enter:

https://<documenso-domain>/api/auth/callback/microsoft

Click Register.

Configure the application

Copy the Application (client) ID

After registration you're on the app overview page. Copy the Application (client) ID for NEXT_PRIVATE_MICROSOFT_CLIENT_ID.

Create a client secret

  • In the left sidebar, click Certificates & secrets
  • Under Client secrets, click New client secret
  • Add a description and select an expiration period, then click Add
  • Copy the Value (not the Secret ID): this is your NEXT_PRIVATE_MICROSOFT_CLIENT_SECRET

Set environment variables

In your Documenso environment, set:

NEXT_PRIVATE_MICROSOFT_CLIENT_ID=<your-application-client-id>
NEXT_PRIVATE_MICROSOFT_CLIENT_SECRET=<your-client-secret-value>

See Also

On this page