Overview

Google Splice is used to connect to the Google accounts to IDHub

Configuration

In IDHUB, there are two types of resources - User and Entitlement.

Account in IDHUB translates to User in SCIM and GSuite.

Entitlements in IDHUB translates to Group in SCIM and translates to Group in GSuite and Permissions for Google Drive

IDHUB

SCIM

Google Workspace

Operation

Account

Account

User

List

Create

Modify

Delete

Add Entitlement (PATCH Only)

Revoke Entitlement (PATCH Only)

Entitlements

Entitlement

Groups

Shared Drive

List

Create

Modify

Delete


Future Scopes

See if we can use App Scripts from google https://developers.google.com/apps-script/reference/drive/user to populate Entitlements for user instead of API calls.

To improve speed of populating membership, check feasibility to use cache with Push Notifications to update cache with latest data immediately https://developers.google.com/drive/api/v3/push . Consistency is important, hence need a mechanism to keep cache up-to-date before implementing the same.