Letting Staff Sign In with Google (Sign-in Methods)
Sign-in methods is where a merchant admin decides whether staff can sign in with their company Google account instead of a password. When it is on, a person still types your Domain on the login page, then clicks Sign in with Google and picks their account. When they leave and IT closes their Google account, they can no longer sign in with Google.
Only people whose role includes user-management access see this section. If it is missing from your Settings list, ask your administrator.
The first time you open this screen a short guided tour starts automatically. Replay it any time with Show me how in the header.
Steps
- Open Settings → Sign-in methods. The Settings entry is pinned at the bottom of the sidebar.
- Set Google sign-in to On. Staff can then use the Sign in with Google button on the login page after typing your domain. Password sign-in keeps working for everyone.
- Optional: in Allowed email domains, type your company domains separated by commas, for example
company.com, company.ae. Only company Google accounts from those domains can sign in, so a personal Gmail account can never get in. Leave it empty to allow any Google account that is connected to a user. - Optional: set Connect by email automatically to On. Then, the first time someone signs in with Google, iotoms connects their Google account to the one active user whose email matches it exactly. If no user, or more than one user, has that email, nothing is connected and they are asked to contact you. This switch needs at least one domain in Allowed email domains (step 3): while that box is empty the switch is greyed out, because only company accounts from your own domains are trusted to connect automatically. If it was saved as On and you later empty the domains box, the screen tells you it has no effect until you add a domain again.
- Check the summary on the right. It shows what your staff will see on the login page, which Google accounts are allowed, and how accounts get connected.
- Save from the amber unsaved-changes bar.
How each person gets connected
Turning Google sign-in on does not connect anyone by itself. Each person is connected in one of two ways:
- From their own Profile. Everyone who can sign in can open Settings → Profile and use the Google Account card. See Managing Your Profile.
- Automatically by email, if you listed your allowed domains and switched Connect by email automatically on (steps 3 and 4).
To see who is connected, open Admin → Users: connected users carry a Google badge next to their username. See Deactivating or Deleting a User to disconnect someone.
Good to know
- The built-in admin and finance users never connect automatically, even with the email switch on, because every workspace starts with the same email on them. They connect from their own Profile.
- Nobody gets an account by signing in with Google. A Google account that is not connected to a user is turned away.
- Everyone who is turned away sees the same message: "No iotoms account is linked to this Google account. Ask your admin." That is true whether Google sign-in is off, the account is outside your allowed domains, it isn't connected to a user, or the Domain was mistyped. Staff are never told which, so the login page gives nothing away about your setup. When someone asks you, check these settings and look for the Google badge next to their name on the Users list.
- With Google sign-in off, the Sign in with Google button still shows on the login page (it is part of the console, not of your domain). Anyone who uses it gets the message above.
- Turning Google sign-in off, or disconnecting someone, does not sign out people who are already signed in. It stops their next Google sign-in. To remove someone's access straight away, deactivate the user.
- If your summary says Google sign-in is not set up on this console yet, the button will not show on the login page even with the switch on. Ask iotoms support to finish the setup.