Unable to get groups data of Google Authenticated user #1432

New Issue

MrUnknownDE · 2026-04-05T19:28:05+02:00

MrUnknownDE commented

2026-04-05 19:28:05 +02:00

Originally created by @shaarif-khan on 5/30/2025

I am using Google as an Idp provider for pangoling, it works like a charm, but there is this issue I am facing while using Google Auth. I am unable to set authorisation policies based on groups info provided by google.

The information mentioned here about leveraging JMESPath and extract out group info from token and assign a role based on that doesn't work when using google auth.

I am unable to use this

contains(groups, 'admin') && 'Admin' || 'Member'

is there a way we can use groups info while using google auth as an Idp provider. if not, we should mention this limitation clearly in the documentation section of it.

*Originally created by @shaarif-khan on 5/30/2025* I am using Google as an Idp provider for pangoling, it works like a charm, but there is this issue I am facing while using Google Auth. I am unable to set authorisation policies based on groups info provided by google. The information mentioned [here](https://docs.fossorial.io/Pangolin/Identity%20Providers/auto-provision#:~:text=contains(groups%2C%20%27admin%27)%20%26%26%20%27Admin%27%20%7C%7C%20%27Member%27) about leveraging JMESPath and extract out group info from token and assign a role based on that doesn't work when using google auth. I am unable to use this > contains(groups, 'admin') && 'Admin' || 'Member' is there a way we can use groups info while using google auth as an Idp provider. if not, we should mention this limitation clearly in the documentation section of it.

MrUnknownDE closed this issue

2026-04-05 19:28:05 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale stale

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1432