-
Notifications
You must be signed in to change notification settings - Fork 0
Google Workspace
This guide walks you through connecting your scout group's Google Workspace to ScoutID, so that members can sign in to Google with their Scoutnet credentials.
The setup has two parts:
- Request the connection — send ScoutID the information needed to configure the login
- Configure Google Admin Console — set up SSO and point Google to ScoutID
You will also want to set up automatic user synchronisation so that Google accounts are created and kept in sync with your Scoutnet membership list.
Send an email to scoutid@scouterna.se with the following information:
- Your scout group name and group ID number (visible in Scoutnet under your profile → Primary group → ID)
- Your Google Workspace domain (e.g.
malarscouterna.se) - A contact person (name and email)
ScoutID will configure the connection and send you back:
- A Client ID
- A Client Secret
- Go to admin.google.com and sign in as a Google Workspace administrator
- Navigate to Security → Authentication → SSO with third-party IdP
- Click Add OIDC profile and fill in the following:
| Field | Value |
|---|---|
| SSO profile name | ScoutID (or any name you prefer) |
| Client ID | (from ScoutID, see Step 1) |
| Client secret | (from ScoutID, see Step 1) |
| Issuer URL | https://dev.id.scouterna.se |
| Change password URL | https://scoutnet.se/f/request_password |
- Save the profile. Google will display a Redirect URI — copy it.
- Send the Redirect URI back to scoutid@scouterna.se so it can be registered on the ScoutID side.
Once ScoutID confirms the redirect URI has been added, the SSO connection is active.
SSO lets existing Google accounts sign in via ScoutID, but it does not automatically create accounts for your members. For that, use Google-Scoutnet-synk — a tool maintained by Scouterna that syncs members from Scoutnet to Google Workspace.
The sync tool:
- Creates Google accounts for members in the form
fornamn.efternamn@yourdomän.se - Keeps accounts up to date as members join or leave
- Disables accounts that no longer match your membership criteria
- Requires no manual password management when ScoutID SSO is in use
See the Google-Scoutnet-synk repository for setup instructions.
Once everything is configured, members can sign in to Google services using their Scoutnet credentials (personal identity number and Scoutnet password). They will be redirected to the ScoutID login page and back to Google upon success.