Add the Google Directory Connector
Authenticate to Google Directory
After you add the connector, you need to set the required properties.- OAuth Client Id: Enter the client Id that you were assigned when you registered your application with an OAuth authorization server.
- OAuth Client Secret: Enter the client secret that you were assigned when you registered your application with an OAuth authorization server.
OAuth
OAuth JWT
GCP Instance Account
AWS Workload Identity
To connect with AWS Workload Identity federation credentials, specify the following properties:
- Auth Scheme: Select AWSWorkloadIdentity.
- AWS Workload Identity Config: Enter a semicolon-separated list of
Key=Valueproperties, as shown in this example:AWSWorkloadIdentityConfig="AuthScheme=AwsRootKeys;AccessKey='AKIAABCDEF123456';SecretKey=...;Region=us-east-1"Note that it is optional as to whether you want to include the value within quotes.
- Workload Pool Id: Enter The identifier (Id) of your Workload Identity Federation pool.
- Workload Project Id: Enter the Id of the Google Cloud project that hosts your Workload Identity Federation pool.
- Workload Provider Id: Enter the Id of your Workload Identity Federation pool provider.
Azure Workload Identity
To connect with single sign-on via PingFederate, specify the following properties:
- Auth Scheme: Select AzureWorkloadIdentity.
- Azure Workload Identity Config: Enter a semicolon-separated list of
Key=Valueproperties, as shown in this example:AzureWorkloadIdentityConfig="AuthScheme=AzureServicePrincipal;AzureTenant=directory (tenant) id;OAuthClientID=application (client) id;OAuthClientSecret=client secret;AzureResource=application id uri;"Note that it is optional as to whether you want to include the value within quotes.
- Workload Pool Id: Enter The identifier (Id) of your Workload Identity Federation pool.
- Workload Project Id: Enter the Id of the Google Cloud project that hosts your Workload Identity Federation pool.
Complete Your Connection
To complete your connection:- Define advanced connection settings on the Advanced tab. (In most cases, though, you should not need these settings.)
- Connect to Google Directory to connect to your Google Directory account.
- Click Create & Test to create your connection.