Understanding the Google Workforce "Enable Users API" Setting

Overview

This article will explain the “Enable Users API” setting in the Google Workforce connection and how it helps customers make use of Google’s API.

Applies To

  • Connections
  • Google Workforce

Solution

The “Enable Users API” setting adds the https://www.googleapis.com/auth/admin.directory.user.readonly scope to the admin access token Auth0 receives.

The setting is helpful for customers who want to leverage the access token Auth0 receives to make their calls to Google’s API. See use identity provider tokens from Google for more info:

  • When “Enable Users API” is selected, it indicates a requirement to make calls to the Google Directory API.
  • To retrieve additional user and group details beyond what Auth0 retrieves by default, use the access tokens returned from Google to call Google’s APIs. To securely access these tokens, follow the guidelines provided in Identity Provider Access Tokens.