Google SSO

Updated

Introduction

Google Single Sign-On (SSO) allows organizations on Teams or Enterprise plans to automatically add new learners to their DataCamp group when they sign up using Google Sign-in, with Google acting as the identity provider (IdP).

Google SSO is designed to simplify user onboarding. It does not control authentication for existing users and does not enforce Google as a required login method. Learners can continue to sign in using a username and password.

This feature can be enabled and managed by group admins the Settings → SSO page.

⚠️ Important: How Google SSO behaves

Google can be used to login and sign up on DataCamp. However, joining the group via Google SSO only applies for new users. Any existing users that use Google to sign in will not be added to the organization.

Additionally, Google SSO does not restrict or replace username/password login. Learners are free to use any login method they want. 

Prerequisites

To use Google SSO, the following requirements must be met:

  • You are a Group Admin
  • Your group is on a Teams or Enterprise plan
  • You own or manage one or more Google Workspace email domains
  • At least one admin has an email address using the domain to be verified

Configure Google SSO

Step 1: Enable Google as your SSO provider

  1. Navigate to Settings → SSO
  2. Select Google from the SSO provider dropdown

A domains table will appear where you can manage the domains associated with Google SSO.

Step 2: Add an email domain

  1. Click Add domain
  2. Enter a domain your organization owns (for example, company.com)
  3. Save the domain

The domain will be added with the status Pending verification and your Google SSO integration will be automatically enabled. However, it does not come into effect until at least one of your domains is approved.

You may add multiple domains if needed.

Verify a domain

Each domain must be verified before it can be approved and activated.

Step 3: Complete domain verification

  1. In the row containing the domain, click "Verify Domain". 
    1. Note: Your DataCamp account’s email domain must match the domain you are verifying (for example, @company.com). Otherwise, the button will not be shown.
  2. A verification email is sent to your inbox
  3. Click the verification link in the email
  4. You are redirected back to DataCamp

Once complete, the domain status updates to "Pending approval".

Domain approval

After verification:

  • DataCamp Support is automatically notified to review the newly verified domain
  • The domain is reviewed and approved by DataCamp

Approval usually takes a few hours, and should take no more than one business day.

Once approved, Google SSO becomes active for that domain.

Learner experience

Sign-up

When a learner signs up using Google Sign-in:

  • If their email domain matches an approved domain:
    • A DataCamp account is created
  • The learner is automatically added to your group

How it works:

  1. New user goes to https://www.datacamp.com
  2. User clicks on the "Google login" button
  3. User successfully logins with their Google Workspace account for your company's domain
  4. User is automatically created and added to your DataCamp group, and can immediately start learning

Sign-in

  • Users can continue to sign in using:
    • Username and password
    • Google Sign-in (if they choose)
  • Google SSO does not enforce Google-based authentication

Email domain whitelisting

When a user without an existing DataCamp account attempts to sign in using the DataCamp sign-in page, we check their email domain. If it matches any of the domains you configured for Google SSO, the user is automatically redirected to Google. Upon successful authentication, they'll return to DataCamp with a newly created account and they'll be added to the group.

This ensures a smooth onboarding experience for new users who may attempt to sign in to DataCamp directly.

How it works:

  1. New user goes to https://www.datacamp.com
  2. User clicks on "Log in"
  3. User enters an email with your company's domain and clicks "Next"
  4. User is redirected to login to their Google Workspace account for your company's domain
  5. On successful login, user is automatically created and added to your DataCamp group, and can immediately start learning

License handling

  • If licenses are available, access is granted immediately
  • If no licenses are available:
    • The learner is added to the waiting list
    • Access can be granted manually once licenses are added

Managing domains and Google SSO

  • Google SSO can be disabled at any time from the SSO settings page (Settings > SSO)
  • Domains that are not yet approved can be removed by a group admin
  • Approved domains currently require DataCamp Support assistance to remove. To remove an approved domain, please raise a support ticket specifying the approved domain you want to remove and we will address it as soon as we can.

Frequently asked questions

Does Google SSO affect existing users?

No. It only applies to new users at the time of sign-up.

Are users required to log in with Google?

No. Username and password login remains available.

Can I remove an approved domain myself?

Not at the moment. Approved domains can only be removed by DataCamp admins. You can disable GoogleSSO entirely if needed.

Can I remove a domain that hasn’t been approved yet?

Yes. Group admins can remove domains that are still pending verification or awaiting approval.

What happens if we run out of licenses?

New users are added to the waiting list until licenses are available.