diff --git a/src/pages/selfhosted/identity-providers/managed/advanced/google-workspace.mdx b/src/pages/selfhosted/identity-providers/managed/advanced/google-workspace.mdx
index 7617d85fc..a9bb0bc1f 100644
--- a/src/pages/selfhosted/identity-providers/managed/advanced/google-workspace.mdx
+++ b/src/pages/selfhosted/identity-providers/managed/advanced/google-workspace.mdx
@@ -1,7 +1,13 @@
-import {Note} from "@/components/mdx";
+import {Note, Warning} from "@/components/mdx";
 
 # Google Workspace SSO with NetBird Self-Hosted (Legacy)
 
+<Warning>
+The client secret has been removed from the authentication flow. The secret was originally included to support providers like Google Workspace that don't offer a proper PKCE flow, but this is no longer necessary with the embedded IdP.
+
+If you are using this standalone Google Workspace setup, we strongly recommend migrating to the [embedded IdP setup with Google as an external provider](/selfhosted/identity-providers/managed/google-workspace#management-setup-recommended). The embedded IdP approach is simpler, fully supported, and does not rely on the deprecated client secret.
+</Warning>
+
 Use Google accounts for authentication with NetBird. This supports both personal Google accounts and Google Workspace (formerly G Suite) organizations.
 
 ## Standalone Setup (Advanced)