Google Login Integration Kit

The PingFederate Google Login Integration Kit allows PingFederate to use Google as an identity provider (IdP). This allows users to access service provider (SP) applications by signing on with Google or G Suite credentials.

Components

Google IdP Adapter

This adapter allows PingFederate to communicate with the Google API to process sign-on requests and get user email addresses or "Basic Profile" information.
For G Suite environments, the adapter uses the Directory API from the G Suite Admin SDK to get "Extended Profile" user information.

Intended audience

This document is intended for PingFederate administrators.

If you need help during the setup process, see the following resources:

The following sections of the PingFederate documentation:
- Managing IdP adapters
- Authentication Policies
Google Sign-in in the Google documentation

System requirements

PingFederate 9.0 or later
To access the "Extended Profile" attributes for G Suite users:
- A G Suite account:
  - In the same organization as the users
  - With access to the Google Developer Console
  - With permission to view user profiles
- API access must be enabled for the organization in Google Admin console.
  
  For more information, see the following in the Google documentation: