directory sync: google

[wasaga]

Page: https://www.pomerium.com/docs/identity-providers/google

What's incorrect or missing

the role of "Impersonate User" is not defined

What's the resolution?

the customer put service account email into this field, that did not work causing "no domain" errors in the logs as google's directory sync tried to fetch groups.

the documentation should explicitly state this must be an actual user email that is part of GSuite.