ScoutID Admin reference page

Audience

This page is intended for ScoutID administrators to document the workflows in general, and specific clients in particular. It can be useful for developers to suggest integration paths when connecting your application.

Google Workspace

Refer the scout group admin to the configuration page.

• Create new client with protocol openid-connect in the scoutid realm.
• Client ID: [scoutkarens id]-google, for example 766-google
• Name: [id] [name] Google Workspace, for example "766 MS Google Workspace".
• Description: Contact information to responsible for the scout group.
• Press Next.
• Client authentication: On
• Authorization: Off. Leave remaing off. Press Next.
• Root URL: https://accounts.google.com.
• Leave the others empty for now. Press Next. Open up the settings for the new client. Go to Credentials and copy Client secret. Send it to the contact person through an encrypted channel.

Now, we need to ensure that the email attribute sent to Google is the group specific email:

Go to Client Scopes → [xxx-google]-dedicated Configure a new mapper → User Attribute Set it up as:

• Name: group_email_mapper
• User Attribute: group_email_xxx (replace xxx with your group id, like 766)
• Token Claim Name: email
• Claim JSON Type: String
• Add to ID token: On
• Add to userinfo: On
• Add to lightweight access token: On Press Save.

Go to Groups. Search for the group id. Enter the domain in the empty attribute for domain.

Finally, once the group admin reaches back with callback url, set it as the callback url.