Google Social Identity Provider Configuration Details
You can set up the Google social identity provider through the Admin UI or in a conf/identityProvider-google.json file. IDM generates the identityProvider-google.json file when you configure and enable this social identity provider in the Admin UI. Alternatively, you can create the file manually.
The following table includes the information shown in the Admin UI Google Provider pop-up window, along with associated information in the identityProvider-google.json file:
Google Social Identity Provider Configuration Properties
| Property (UI) | Property (JSON file) | Description |
|---|---|---|
| Client ID | clientId | The client identifier for your Google Identity Platform project |
| Client Secret | clientSecret | Used with the Client ID to access the configured Google API |
| Scope | scope | An array of strings that allows access to user data; see Google's documentation on Authorization Scopes |
| Authorization Endpoint | authorizationEndpoint | Per RFC 6749, "used to interact with the resource owner and obtain an authorization grant". For Google's implementation, see Forming the URL. |
| Token Endpoint | tokenEndpoint | Endpoint that receives a one-time authorization grant, and returns an access and ID token |
| User Info Endpoint | userInfoEndpoint | Endpoint that receives an access token, and returns information about the user |
| Well-Known Endpoint | wellKnownEndpoint | Access URL for Google's Discovery Document |
| Not in the Admin UI | name | Name of the social identity provider |
| Not in the Admin UI | type | Authentication module |
| Not in the Admin UI | authenticationId | Authentication identifier, as returned from the User Info Endpoint for each social identity provider |
| Not in the Admin UI | propertyMap | Mapping between Google and IDM |
For information on social identity provider buttons and badges, see "Social Identity Provider Button and Badge Properties".