GCP - 启用外部身份提供商

Question

Trying to add external provider (github) to authenticate user. However, I am running in to following error during Google Cloud Identity Platform setting

There was an error in updating the GCIP settings. You can return to your configuration and retry later

Create Cloud Run Instance step is successful. Add Authorized Domain step is failure

It looks like server is responding with 400 status code for PATCH request

Request URL: https://iap.clients6.google.com/v1/projects/<project id>/iap_web/appengine-test-3-295108123:iapSettings?updateMask=iapSettings.accessSettings.gcipSettings.tenantIds,iapSettings.accessSettings.gcipSettings.loginPageUri&key=<apikey masked>
Request Method: PATCH
Status Code: 400 

UPDATE Identity Aware Proxy (IAP) is enabled on App Engine to protect static artifacts deployed on app engine (python runtime)

Answer 1

I ran into the same issue and a workaround was using the "I'll provide my own" instead of the "Use an existing hosted sign-in page" option. We provided the Cloud Run URL still as the URL and it successfully deployed. When we went to edit the Authentication URL, it appears that in the background, the method updated to "Use an existing hosted sign-in page." To confirm, we switched back to IAM and then did the steps to configure external identities. We used the "Use an existing hosted sign-in page" and it worked this time.