# Allow Users to Log in to the Cloud Voice App with Google SSO

Once your Google Workspace users have been synced into Cloud Voice, you can switch on Single Sign-on (SSO). With SSO enabled, those users sign in to the Cloud Voice App with their existing Google account rather than an extension username and password. This page covers enabling the feature and getting each app version ready.

## Before you begin

- You have [connected Cloud Voice to Google Workspace](/pbx/integrations/google-workspace/integrate-cloud-voice-with-google-workspace/).
- You have [synced your Google Workspace users into Cloud Voice](/pbx/integrations/google-workspace/synchronize-users-from-google-workspace-to-cloud-voice/).

## Turn on Single Sign-on

1. Sign in to the phone system management portal and go to **Integrations > Collaboration**.

2. Find the **Single Sign-on (SSO)** section and switch it on.

   ![The Single Sign-on toggle in the Collaboration integration settings](/images/pbx/google-sso.png)

   The **Client SSO Redirect URI** field then shows the URL that users go through when signing in to the Cloud Voice App with their Google account.

   
   ![Cloud Voice, the Client SSO Redirect URI displayed after SSO is enabled](/images/pbx/google-client-uri-pce.png)

   :::note
   Confirm that this Client SSO Redirect URI is listed as an authorized redirect URI in [your Google Cloud application](/pbx/integrations/google-workspace/integrate-cloud-voice-with-google-workspace/#integrate-yeastar-p-series-pbx-system-with-google-workspace__redirect-uri). Sign-in fails if it is missing.
   :::

3. Optional: Use the **Login Method** drop-down list to control how Google users are allowed to sign in.

   ![The Login Method drop-down showing the two available sign-in options](/images/pbx/sso-login-method.png)

   - **Allow users to log in via SSO or using the PBX credential**: Users can sign in either through Google SSO or with the username and password of their linked extension.
   - **Enforce SSO login only**: Users can sign in through Google SSO only.

   :::caution
   **Enforce SSO login only** turns off username-and-password sign-in for the linked extensions. Any user who is not a synced Google Workspace account, or who cannot reach Google (for example during a Google outage), will be locked out of the Cloud Voice App. Leave the setting on **Allow users to log in via SSO or using the PBX credential** unless you specifically need to require Google sign-in.
   :::

4. Click **Save**.

Synced users can now open the Cloud Voice App by signing in with their Google credentials.

## Get each app ready

Let your users know how to sign in with Google on the app version they use. The steps differ slightly across mobile, desktop, and web.

### Mobile app

1. Update the Cloud Voice App to a supported release:
   - iOS: version 5.21.3 or later
   - Android: version 5.21.7 or later

2. In the **SN/Domain** field, enter the phone system address that is enabled for Google SSO.

   
   ![Cloud Voice, entering the phone system address in the SN/Domain field on mobile](/images/pbx/google-mobile-sso-pce.png)

3. Tap the Google icon ![Google sign-in icon](/images/pbx/google.png) and sign in with your Google credentials.

   
   ![Cloud Voice, the Google sign-in button on the mobile login screen](/images/pbx/google-mobile-sso-button-pce.png)

### Desktop app

1. Update the Cloud Voice App to version 1.18.5 or later.

2. In the **Domain** field, enter the phone system address that is enabled for Google SSO.

   
   ![Cloud Voice, entering the phone system address in the Domain field on desktop](/images/pbx/google-pc-domain-pce.png)

3. Click the Google icon ![Google sign-in icon](/images/pbx/google.png) and sign in with your Google credentials.

   
   ![Cloud Voice, the Google sign-in button on the desktop login screen](/images/pbx/google-pc-domain-login-pce.png)

### Web app

1. Open the Cloud Voice App in your browser using the phone system address that is enabled for Google SSO.

2. Click the Google icon ![Google sign-in icon](/images/pbx/google.png) and sign in with your Google credentials.

   
   ![Cloud Voice, the Google sign-in button on the web login screen](/images/pbx/google-pce-sso.png)