How to Integrate SSO for Dynamic Credentials in Google Calendar Data Access Workflow?

1

This topic was automatically generated from Slack. You can find the original thread here.

Hello

I need to have dynamic credentials

my workflow would be like this:

• I send request to endpoint to get Google calendar data (this can be get events, create event, update and delete event)
• parse the calendar data
• return the results in endpoint
I need to have dynamic credentials (not to be set via pipedream UI)
is there a way to use SSO maybe to authenticate any user, I just have to authenticate just once as a organization and the members of the organization would have direct access? This is just example with Google calendar but it can be any other app to integrate via SSO. Is this possible and how, can someone please share knowledge with me? How would you make such integration?

2

Hi , Pipedream Connect might be the feature that you need: Connect

Would you might check it out?

3

Thanks, I’m checking it

4

I checked this a bit, and still don’t know how SSO is achievable using connect? What I was looking at is oauth and Pipedream SDK popup credentials window form where each user has to enter his credentials… But I need only one authorization and each user should be authenticated automatically. Do you know about any link on which I can check more about SSO with Pipedream? Connect looks super but only I need to trigger the authorization process only once for all the apps

5

Hi Teufik, I don’t totally understand the use case, and have a few clarifying questions:

  1. What application are you trying to connect to?
  2. Who will be connecting their account?
  3. What role does SSO play here?
6
  1. Google calendar, Youtube… lets say Jira, etc…
  2. I thought it would be enough for an organization admin to set authorization SSO credentials, and each other regular user would be able to use the app without having to login or give any credentials
  3. If I understand well it’ll help me to connect to any application with single authentication, any user would have access without having to login
    please if I have to explain more I’ll try
7

And these users are connecting their accounts for Google Calendar, YouTube, Jira, etc to your application?

8

I imagine they would have access to their own calendar via my application. and yes I would have to be able to get the data from their calendar

9

SSO is used for authentication but not authorization, so I think there might be some confusion there. If you need access to make API requests on behalf of those users to their accounts, Pipedream Connect can abstract and handle the authorization to those APIs for you, but SSO doesn’t play a role there.

10

Each user would have to authorize access for either your application or Pipedream to connect to their account

11

so I cannot bypass the part where user needs to give credentials?

12

can you explain a bit the workflows in the examples you mentioned? using Connect I can set the webhook url for getting the token per user

13

and probably it wont be so bad if user just once has to enter his credentials to loggin lets say to github

14

No, not typically. That’s very intentional that individual end users need to authorize access to their accounts. Google Workspace admins might be able to grant access to your application for everyone in the workspace using delegated authority I think it’s called, but you’ll need to look into that to confirm. That’s just for Google Workspace users and Google applications.

15

I recommend you check out the Connect docs, that outlines how you can get access to your users accounts, and Pipedream would store those access tokens and handle the refresh in the background so you always have access to a fresh access token.

16

And we’re about to release support for using those credentials within your workflow during execution.

17

and just one more thing… SSO that Pipedream provide as a functionality, for what I can use it for? how it can be integrated inside of a workflow? or it can’t?

18

SSO in Pipedream enables you and your coworkers to sign in to Pipedream through your SSO provider.

19

OK, thanks I misunderstood things here

20

Yea, no problem!