User authentication

In order to use the Google SSO, the XCALLY users must have the proper Google account set as "email" in the Motion Staff section.

Image Added

If they are already logged into the Chrome browser, they need just to click on 

Image Added

Otherwise, Google will ask them the account credentials

Image Added

• Please check in the General Settings the Single Sign-On property has been turned on!

• inserire screeshot

Creating a Google API Console project and client ID

• Access to the

• Google

• Developers Console (https://console.developers.google.com)

• Select or create a new project

STAMP

• apiS & sERVICES

• Click on the credentials

• Create CREDENTIALS

• Now you can add the credentials to access the APIs, click "Create credentials" and select "OAuth client ID"

• SELECT WEB APPLICATION

STAMP SSO

REDIRECT URI : HTTPS… MOTION DOMAIN/API/callback + ADD uri

Insert in the authorized URIs field the URI related your Motion server

https://{{MOTION_IP}}/api/auth/google/callback

STAMP SSO 6

• ti da le credenziali (valori che devi inserire in ssh)

CLiENT ID

CLIENT SECRET

URI

VAI IN SSH

ENTRA COME MOTION con comando :

su motion

poi comando:

cd /var/opt/motion2

poi

nano .env

STAMP DEL SERVER SSO 7

• RIMUOVI Il cancelletto (uncomment) dei valori

• inserisci i valori (tra le ' )

Google ID è CLiENT ID

CLIENT SECRET

DOmani è URI

• CRTL X per salvare

• Y per dare ok per confermare modifiche

• dai invio

Ri-inizializza le variabili appena modificate con comando:

npm run initialize

• Make sure that services are up by running pm2 list

Motion server configuration

edit the file /var/opt/motion2/server/config/environment/production.js

and replace the following rows:

google: {
        clientID: process.env.GOOGLE_ID || 'id',
        clientSecret: process.env.GOOGLE_SECRET || 'secret',
        callbackURL: (process.env.DOMAIN || 'https://YOUR_MOTION_IP') + '/api/auth/google/callback'
    }

with the Google application ID, example:

   google: {
        clientID: process.env.GOOGLE_ID || '1234567890-abcdefghijklmnopqrstuvwxyz.apps.googleusercontent.com',
        clientSecret: process.env.GOOGLE_SECRET || 'abc-123456abcdefghijklmn',
        callbackURL: (process.env.DOMAIN || 'https://pbx2.xcally.com') + '/api/auth/google/callback'
    }

restart the motion service to apply the change

su motion
pm2 restart motion2