Configuring Google Space via ACS and IDP for Identifying Brokering

Add a New Realm.

Create a client.

Add the mappers for upn

Name

and

Token Claim Name

, both must point to

username

in the Property field.

From the

Identity Provider

menu, select the

Google

from drop down.

Add configuration copied from step1, the

Google Client ID

and

Client Secret

in the

Identity Providers

menu.

For Default scopes, use

openid profile email

Enable the toggle for the

Request refresh token

, and

Store Tokens

option.