Skip to main content
By default, if you use "google" for OAuth in your Traffic Policies without specifying a Google OAuth application, visitors are authenticated using ngrok’s managed Google OAuth instance. Setting up your own Google OAuth application lets you customize authentication in more detail. This guide walks you through creating a Google OAuth 2.0 application for your ngrok endpoints.

What you’ll need

  • A Google Cloud Platform account and project.
  • Your ngrok authtoken and an endpoint with the OAuth action in its Traffic Policy.
2

Create credentials for ngrok

Create an OAuth Web application client (see Google’s documentation), and set the following:
  • Authorized redirect URIs: https://idp.ngrok.com/oauth2/callback
Securely store the Client ID and Client secret from the final screen for use in your Traffic Policy below. The client secret is shown only once.
3

Update your ngrok endpoint Traffic Policy

  1. Access the ngrok dashboard Endpoints page and locate an existing endpoint you’d like to add this to or create a new one.
  2. In your Traffic Policy, add the following configuration:
You may add any scopes that are required by your application with the following caveats.
Click Save to validate and update your Traffic Policy.

Configure access control

Optionally, configure access control to your service by only allowing specific users or domains.

Further resources