# Config reverse proxy for GoogleSSO

**URL:** <https://www.virtocommerce.org/t/config-reverse-proxy-for-googlesso/738>\
**Category:** support\
**Tags:** storefront, platform-v3\
**Created:** [October 11, 2024, 3:38am UTC](https://www.virtocommerce.org/t/config-reverse-proxy-for-googlesso/738 "2024-10-11T03:38:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![giantpenguin](https://yyz2.discourse-cdn.com/flex032/user_avatar/www.virtocommerce.org/giantpenguin/32/1659_2.png) [@giantpenguin](https://www.virtocommerce.org/u/giantpenguin)\
**Post date:** [October 11, 2024, 3:38am UTC](https://www.virtocommerce.org/t/config-reverse-proxy-for-googlesso/738/1 "2024-10-11T03:38:00Z")

</div>

Hi Team,

I am now trying the GoogleSSO ([GitHub - VirtoCommerce/vc-module-google-sso: Enables Google external login setup for Virto Commerce Platform and Frontend](https://github.com/VirtoCommerce/vc-module-google-sso)) on the recent Frontend App ([GitHub - VirtoCommerce/vc-frontend: Virto Commerce Frontend - B2B SPA is a fresh look on the field of eCommerce solutions. This is a place where common B2B and B2C scenarios are combined with the most bleeding edge technologies to deliver blazing fast and fully functional solution. It implements common business use-cases needed for a vast majority of projects we build.](https://github.com/VirtoCommerce/vc-frontend) version 2.6.0), but I am not able make it forward/rewrite the request successfully. This is what I have:

- Use the IIS Url Rewrite module to make the IIS server as a reverse proxy
- Apply an Inbound rule (rewrite to the platform site) on the /graphql segment so that the site work as normal (the frontend site shows commerce data)
- Have an expected GoogleSSO configuration on the Platform’s appsettings.json
- Apply an Inbound rule (rewrite to the platform site) on the /externalsignin and /signin-google segments

My issue is the platform does not redirect to the expected **[https://accounts.google.com](https://accounts.google.com)**/o/oauth2/v2/auth/oauthchooseaccount?.. (as it is on the [https://virtostart-demo-store.govirto.com/](https://virtostart-demo-store.govirto.com/))  
instead the redirect becomes **\<my\_frontend\_site\>** /o/oauth2/v2/auth/oauthchooseaccount?..

I think the Inbound rule on the /externalsignin and /signin-google segments must be configured differently, but I don’t know what it should be.  
Please help for this.

Thank you!

---

<div class="post-metadata">

**Author:** ![giantpenguin](https://yyz2.discourse-cdn.com/flex032/user_avatar/www.virtocommerce.org/giantpenguin/32/1659_2.png) [@giantpenguin](https://www.virtocommerce.org/u/giantpenguin)\
**Post date:** [October 11, 2024, 6:54am UTC](https://www.virtocommerce.org/t/config-reverse-proxy-for-googlesso/738/2 "2024-10-11T06:54:03Z")

</div>

Googled, I fortunately found out the issue cause, the detail is at [AddOpenIdConnect options.Authority overriden with current host behind proxy (UseForwardedHeaders) · Issue #31383 · dotnet/aspnetcore · GitHub](https://github.com/dotnet/aspnetcore/issues/31383).

---

<div class="post-metadata">

**Author:** ![OlegoO](https://yyz2.discourse-cdn.com/flex032/user_avatar/www.virtocommerce.org/olegoo/32/27_2.png) [@OlegoO](https://www.virtocommerce.org/u/OlegoO)\
**Post date:** [October 11, 2024, 8:29am UTC](https://www.virtocommerce.org/t/config-reverse-proxy-for-googlesso/738/3 "2024-10-11T08:29:24Z")

</div>

Thank you for the feedback