Skip to content

fix: docs, polish readme to include user custom_schemas for the SSO setup #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jun 9, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 18 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -29,9 +29,10 @@ Once you've completed the setup process, your provider block should look like th

```hcl
provider "googleworkspace" {
# Use 'my_customer' as an alias for your account's customerId to ensure compatibility with Google's API
# For example, custom schemas on the user object will fail if the customer_id is set to your actual customer_id
# For more details: https://developers.google.com/workspace/admin/directory/reference/rest/v1/schemas/get
# Use 'my_customer' as an alias for your account's customerId to ensure compatibility with
# Google's API. For example, custom schemas on the user object will fail if the customer_id
# is set to your actual customer_id
# For more details, see: https://developers.google.com/workspace/admin/directory/reference/rest/v1/schemas/get
customer_id = "my_customer"

credentials = "/path/to/credentials/my-google-project-credentials-1234567890.json"
Expand Down Expand Up @@ -65,6 +66,20 @@ module "googleworkspace_users_groups" {
role = "member"
}
}
custom_schemas = [
{
schema_name = "Client1"
schema_values = {
Role = "[\"arn:aws:iam::111111111111:role/GoogleAppsAdmin\",\"arn:aws:iam::111111111111:saml-provider/GoogleApps\"]"
}
},
{
schema_name = "Client2"
schema_values = {
Role = "[\"arn:aws:iam::222222222222:role/xyz-identity-reader,arn:aws:iam::222222222222:saml-provider/xyz-identity-acme-gsuite\", \"arn:aws:iam::222222222222:role/xyz-identity-admin,arn:aws:iam::222222222222:saml-provider/xyz-identity-acme-gsuite\"]"
}
}
]
}
}

Expand Down
4 changes: 2 additions & 2 deletions examples/import-existing-org/users.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,10 +10,10 @@ first.last@example.com:
family_name: Last
given_name: First
custom_schemas:
- schema_name: AWS_SSO_for_Client123
- schema_name: AWS_SSO_for_Client1
schema_values:
Role: '["arn:aws:iam::111111111111:role/GoogleAppsAdmin","arn:aws:iam::111111111111:saml-provider/GoogleApps"]'
- schema_name: AWS_SSO_for_Client456
- schema_name: AWS_SSO_for_Client2
schema_values:
Role: '["arn:aws:iam::222222222222:role/xyz-identity-reader,arn:aws:iam::222222222222:saml-provider/xyz-identity-acme-gsuite", "arn:aws:iam::222222222222:role/xyz-identity-admin,arn:aws:iam::222222222222:saml-provider/xyz-identity-acme-gsuite"]'

Expand Down