Questions tagged [google-cloud-identity]

107 questions
1
vote
1 answer

GCP IAM Access Denied: User from another domain does not have access to query BQ under Org

I have GCP org set up under a verified domain name (company.tech) with cloud identity enabled to use google cloud project. I am managing access to users through google groups (via admin panel). I've created a group with users from (company.tech,…
1
vote
1 answer

Adding Google accounts to Cloud Identity Groups

I have Google identity with a domain example.com and have created a group, say my-admins@example.com. I can create users a-user@example.com and say another-user@example.com and add them to group my-admins@example.com. I have a Google Cloud…
1
vote
1 answer

What users can access my AppEngine application that is protected by Identity Aware Proxy for an internal OAuth application?

IAP allows you to protect apps on AppEngine by defining which principal has access using roles/iap.httpsResourceAccessor. If I have a group in IAM called participants and I add external people (personal gmail accounts & contractors) to that group,…
1
vote
0 answers

Cloud Identity Platform make Custom SAML ACS Callback

I'm trying to make a custom SAML app to integrate with Google Workspace (i.e. so that if a person in the organization wants to access it, they could do so from the apps list on google.com). Because Google Cloud Identity Platform only supports…
Caleb H.
  • 1,657
  • 1
  • 10
  • 31
1
vote
1 answer

Unable to customize authorisation callback URL for SAML provider after connecting custom domain

I'm unable to customize the authorisation callback URL to my custom domain when adding a new SAML provider in Google Cloud Identity platform. I took the following steps: I successfully connected my domain via the firebase console: the status says…
sdcbr
  • 7,021
  • 3
  • 27
  • 44
1
vote
1 answer

What is the best way to pass credentials to and from Dialogflow

I might be missing this entirely in the documentation, but I'm looking for examples of passing authentication to and from Dialogflow. The Dialogflow examples I find are open for all users, but I want the Dialogflow interaction to be logged into a…
1
vote
0 answers

How to configure Windows 10 login with secure LDAP

Is there any way to configure windows 10 login with Google secure LDAP service? References which I have already tried: (LDP.exe for windows 10) Can anyone help me in this Thanks
Ashwani
  • 485
  • 2
  • 9
  • 23
1
vote
1 answer

How to integrate Google Cloud Identity with classic username/password authorization?

I am looking for a solution to integrate Google Cloud Identity into an existing project. The idea is that there are two applications - old and new one. Within old application the users are right now logging with username and password, within the new…
UO Man
  • 153
  • 4
  • 13
1
vote
1 answer

How to make a Google Group a Super Admin of my Cloud Identity

I get the error "Groups are not allowed to be added to this role." when I try to add a Google Group in my Cloud Identity domain as a Super Admin (through admin.google.com). Is there anyway to provide super admin roles to a group of users rather than…
3thanZ
  • 133
  • 1
  • 1
  • 4
0
votes
0 answers

Firebase Admin : getUser isn't working while verifyIdToken works

I'm initializing the firebase config as following, firebaseAdmin.initializeApp({ credential: applicationDefault(), projectId: "${my_project_id}", }); Verify ID token is working, firebaseAdmin .app() .auth() .verifyIdToken(idToken) …
0
votes
0 answers

Can Google Cloud Identity API return device software information

The Admin SDK document: (https://googleapis.github.io/google-api-python-client/docs/dyn/admin_directory_v1.mobiledevices.html#list) states: list(customerId, maxResults=None, orderBy=None, pageToken=None, projection=None, query=None, sortOrder=None,…
0
votes
0 answers

Looking for an API call to fetch all domain-wide delegations within my Google Admin Console

For security reasons we are looking to automate calls into Google Admin Console (Workspace) in order to fetch, once a day, all the domain-wide delegations within our Google Admin console, the call needs to provide the client ID and the scopes of…
0
votes
1 answer

How to create a google cloud identity for any email programmatically using Java?

I have a requirement of creating google cloud id for some emails programmatically using Java. I can create full google workspace account for users using Directory lib but for some users we dont require workspace account and hence we just want to…
user1108687
  • 209
  • 1
  • 2
  • 13
0
votes
0 answers

Blocking functions are broken and unable to prevent sign-in before verifying email address (Google Identity Platform & Firebase Auth)

Problem I'm searching for a way to prevent a user from signing in before they verify their email address. I tried three different approaches that I'll describe below, including ones involving blocking functions. So far with no success. While…
0
votes
0 answers

Importing user into a Firebase tenant from parent project gives INVALID_PASSWORD error?

I've followed the steps to import a user from a Firebase project into one of its tenants, and the process seems to complete OK (no errors), but when I attempt to login with the email/password into the tenant, I get an invalid-password error. I'm…
MLH
  • 21
  • 4