Gogle workspace oidc token is missing groups

Zero Trust
1

Related to

Settings

What is the issue you’re encountering

After configuring Google Workspace OIDC successfully, CF_AUTHORIZATION token is missing the user’s groups, even though it’s returned in the Test result

What steps have you taken to resolve the issue?

  1. I have configured successfully the OIDC integration, the groups are returned after the “Test” action, but not when using the integration itself in “CF_AUTHORIZATION” cookie
  2. I havet added the following scopes to the google app https://www.googleapis.com/auth/admin.directory.group https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly
  3. I tried to add scopes to the integration in cloudlare, but everytime I click on save, the new scope is removed

please help me :slight_smile: