OAuth / Single Sign-On

Sign in to Alpha Platform using your existing Google or enterprise identity provider.

Overview

OAuth (Open Authorization) enables you to sign in using credentials from trusted identity providers. This provides:

• Single Sign-On (SSO) convenience
• Centralized identity management
• Enhanced security through provider
• No separate password to manage

Supported Providers

Using Google Sign-In

Step 1: Navigate to Login

1. Go to your organization's Alpha Platform URL
2. You'll see the sign-in page

Step 2: Choose Google

1. Click Sign in with Google
2. You'll be redirected to Google's sign-in page

Step 3: Authenticate with Google

1. Select your Google account
   • Or enter your Google email
2. Enter your Google password (if required)
3. Complete any 2FA prompts

Step 4: Grant Permissions

On first sign-in, you'll see a consent screen:

• View your email address
• View your basic profile info

Click Allow or Continue to proceed.

Step 5: Access Alpha

• You're redirected back to Alpha Platform
• Dashboard loads automatically
• Session is established

Account Linking

Automatic Linking

If your Google email matches an existing Alpha account:

• Accounts are automatically linked
• You can use either method to sign in
• All data remains associated

Manual Linking

To add Google sign-in to an existing account:

1. Sign in with email/password
2. Go to Profile > Security
3. Click Link Google Account
4. Complete Google authentication
5. Accounts are now linked

Enterprise SSO (SAML/OIDC)

For organizations using enterprise identity:

Configuration (Administrators)

1. Go to Administration > Security > SSO
2. Click Configure SSO
3. Enter provider details:
   • Provider type (SAML 2.0 or OIDC)
   • Client ID / Entity ID
   • Client Secret
   • Issuer URL / Metadata URL
4. Save configuration
5. Test with a pilot user

User Experience

With enterprise SSO:

1. Navigate to Alpha login
2. Enter your corporate email
3. Click Continue
4. Redirected to corporate login (if not signed in)
5. Authenticate with corporate credentials
6. Returned to Alpha Platform

Security Considerations

Provider Security

Your security depends on your OAuth provider:

• Enable 2FA on your Google/Microsoft account
• Use strong provider passwords
• Review connected apps regularly
• Revoke access for apps you don't use

Session Behavior

OAuth sessions in Alpha:

Troubleshooting

"Account Not Found"

If you see this error:

1. Your email may not be registered in Alpha
2. Contact your administrator for an invitation
3. Ensure you're using the correct Google account

"Access Denied"

This may mean:

1. Your organization doesn't allow Google sign-in
2. You need administrator approval
3. The OAuth configuration needs attention

Can't Link Account

If unable to link:

1. Email addresses must match exactly
2. Account may already be linked to another provider
3. Try signing out and in again

Removing OAuth Access

From Alpha

1. Go to Profile > Security
2. Find linked providers
3. Click Unlink next to the provider

From Google

1. Go to Google Account Security
2. Find "Third-party apps with account access"
3. Find Alpha Platform
4. Click Remove Access

Related