How to enable SSO for Google BigQuery

Atlan supports SSO authentication for Google BigQuery connections. Once you've configured SSO authentication for Google BigQuery, your users can:

• Query data with SSO credentials
• View sample data with SSO credentials

(Optional) Configure OAuth consent screen in Google BigQuery

To configure the OAuth consent screen, from Google BigQuery:

1. Open the Google Cloud console.
2. In the left menu of the Google Cloud console, under APIs & Services, click OAuth consent screen.
3. On the OAuth consent screen page, under User Type, select a preferred user type and then click Create.
4. In the corresponding Edit app registration page, enter the following details:
   
   1. For App name, enter a meaningful name — for example, Atlan_SSO.
   2. For User support email, enter a support email for your users to troubleshoot.
   3. For Developer contact information, enter an email address where Google can notify you about any changes to your project.
   4. Click Save and continue to proceed to the next step.
5. On the Scopes page, complete the following steps:
   1. Click Add or remove scopes to add a new scope.
   2. In the Update selected scopes dialog, click BigQuery API to add the /auth/bigquery scope and then click Update.
   3. Click Save and continue to finish setup.
6. Once the OAuth consent screen configuration is successful, click Go back to dashboard.

Create access credentials in Google BigQuery

Credentials are used to obtain an access token from Google's authorization servers for authentication in Atlan.

To create access credentials, from Google BigQuery:

1. Open the Google Cloud console.
2. In the left menu of the Google Cloud console, under APIs & Services, click Credentials.
3. From the upper right of the Credentials page, click Create credentials, and from the dropdown, click OAuth client ID. 
4. In the OAuth client ID screen, enter the following details:
   1. For Application type, click Web application.
   2. For Name, enter a meaningful name — for example, Atlan_client.
   3. Under Authorized JavaScript origins, click Add URI and enter your Atlan instance — for example, https://<company-name>.atlan.com.
   4. Under Authorized redirect URIs, click Add URI and enter your Atlan endpoint URI — for example, https://<company-name>.atlan.com/api/service/oauth.
   5. Click Create to finish setup.
5. From the corresponding OAuth client created dialog, copy the Client ID and Client secret and store it in a secure location.

Configure SSO authentication in Atlan

Once you have configured access credentials in Google BigQuery, you can enable SSO authentication for your users to query data and view sample data in Atlan.

To configure SSO on a Google BigQuery connection, from Atlan:

1. From the left menu of any screen, click Assets.
2. From the Assets page, click the Connector filter, and from the dropdown, select BigQuery.
3. From the pills below the search bar at the top of the screen, click Connection.
4. From the list of results, select a Google BigQuery connection to enable SSO authentication.
5. From the sidebar on the right, next to Connection settings, click Edit.
6. In the Connection settings dialog:
   • Under Allow query, for Authentication type, click SSO authentication to enforce SSO credentials for querying data:
     • For SSO authentication, enter the following details:
       1. For Client ID, enter the client ID you copied from Google BigQuery.
       2. For Client secret, enter the client secret you copied from Google BigQuery.
   • Under Display sample data, for Source preview, click SSO authentication to enforce SSO credentials for viewing sample data:
     • If SSO authentication is enabled for querying data, the same connection details will be reused for viewing sample data.
     • If a different authentication method is enabled for querying data, enter the client ID and client secret you copied from Google BigQuery.
7. (Optional) Toggle on Enable data policies created at source to apply for querying in Atlan to apply any data policies and user permissions at source to querying data and viewing sample data in Atlan. If toggled on, any existing data policies on the connection in Atlan will be deactivated and creation of new data policies will be disabled.
8. At the bottom right of the Connection settings dialog, click Update.

Your users will now be able to run queries and view sample data using their SSO credentials! 🎉