Google sso group mapping

💬 Account & User Management
1

Current plan level: Business on SaaS

We configured Google SSO, and I saw that under "Optional," there is a field called "Default groups for domains," which allows mapping between Google groups and retool groups.

I didn't find any docs explaining how to configure this.
What is the value I need to pass in the "SSO group\role" field? and where do I get it?

2

Hey @Stas_Soro Welcome to the community!

To configure the Default Groups for Domains in your Google SSO setup, you will map Google groups to Retool permission groups. The format you need to use is a comma-separated list of mappings that looks like this:

google-group@example.com -> RetoolGroup

In this setup:

  • Replace google-group@example.com with your actual Google Group email address.
  • Replace RetoolGroup with the name of the corresponding permission group in Retool that you want users from the Google Group to join.

For example, if you have a Google group called retool-admins@example.com and you want to map it to the Admin group in Retool, you would input:

retool-admins@example.com -> Admin

You can find the names of your Retool groups in your Retool organization settings under Settings > Users > Permission Groups.

Make sure to double-check your configurations to avoid any issues with group syncing. If there are any errors in your mapping, it could affect user permissions when they log in.

If you need further clarification or to ensure everything is configured correctly, please refer to the Configure group syncing and role mapping guide.

6 Likes