Google SSO and user provisioning

Question

Hi,

I'm a new SWSD customer and was hoping to get some insight to how others have dealt the limitations of using Google SSO for provisioning users. Since the only available attribute for newly created Google SSO accounts is email address, we're looking for a way to at least get first/last name associated with their account. Has anyone been able to successfully set up an API integration with their Google environment to get/sync this information, or require a user to update their profile information manually when they first sign in? We don't have any of the other SSO options available to us, so it's Google or bust.

Any help on this would be greatly appreciated.

Thanks!

joeybrown · Answer

Hi captainyesterday , I know this is an old question but hopefully I can help a little. You are correct that right now we only bring in the email address when we do Just In Time Provisioning (JIT) with Google SSO. What we have seen other Google Workplace companies do is have Google export the user list to something like a csv and then run a powershell, ruby, etc script on that csv to update the attributes of the users. We can look to adding more attributes in the JIT Provisioning and I would recommend opening a feature request so we can track it. 
 Here are some links to the APIs and potential sample scripts that could help get you going. I know its not a direct example like you asked but hopefully this helps! 
 SWSD API User 
 GitHub - Sync Users Example