Google Identity Platform -> Identity Provider

Question

We are thinking of using Google Identity Platform as our Customer IAM.

We have applications that could then use Google Identity Platform as their OAuth2 Authorization Provider (and also for OIDC Authentication) directly - applications that are only dealing with customers.

However, we also have applications that, today are using Keycloak as their OAuth2 Authorization Provider (and OIDC Authentication), where Keycloak is used as an Identity Broker, ie it will need to connect to the Customer IAM as well as to the Enterprise IAM so that Customers as well as employees (their identities are not in the Google Identity Platform) can be authenticated and authorized.

My questions: Can the Google Identity Platform be federated into Keycloak with other identity providers? Or is there some other tool required in front of Identity Platform in order to achive this?

I found this article GCP Identity Platform with Google IDP , which is similar, but not same.

Thanks and regards Kai-Uwe

Answer 1

You can use Keycloak single sign-on(SSO) between Keycloak and your Cloud Identity (or Google Workspace account) by using SAML federation. Check this guide out Keycloak single sign-on