Hi
What is correct way to apply google SSO but with out trying to map groups.
I’ve enabled google. But for mapping i’m using custom script and do not want to map google to any another group.
app.sso_google_mode = “org”
app.sso_google_key is set
The groups mode can be used for more complex cases where multiple groups are needed. To do this delete all the organizations and create one organization. Set this organization as the default single sign-on organization in the top right settings then attach the organization to all servers. Then run the commands below with the quotes as shown. In each of the server settings add the groups that will be able to access that server. This can result in larger usage of IP address pools. Every user that is attached to a server will have a static IP assigned even if a group is not matched. The server virtual network subnet size should allow for this. For SAML attribute groups is used to set a comma separated list of groups.
sudo pritunl set app.sso_azure_mode '"groups"'
sudo pritunl set app.sso_authzero_mode '"groups"'
sudo pritunl set app.sso_google_mode '"groups"'
Yes we already have one organization and access to servers splitted by groups. As i understand correctly if i set app.sso_google_mode '“groups” server won’t be searching Google groups and tying to add them to a list that our plugin returns?
The single sign-on groups will be copied to the user groups in Pritunl. The plugin handles will be provided with the groups and can return a modified list of groups.
I understand this. Main problem is that sso_authenticate group variable (sso_group_names) is addon group (it is empty on call). This group merges with the google groups later