Create an OAuth client in the Google Cloud console with the callback https://your-domain.example/socialAuth/google/callback, then enter the client ID and secret in Admin → Settings → Security. The App URL must match the hostname in the callback exactly.
Guide
Google sign-in
People can sign in with Google.