authentik/blueprints/system/providers-google-workspace.yaml

version: 1
metadata:
  labels:
    blueprints.goauthentik.io/system: "true"
  name: System - Google Workspace Provider - Mappings
entries:
  - identifiers:
      managed: goauthentik.io/providers/google_workspace/user
    model: authentik_providers_google_workspace.googleworkspaceprovidermapping
    attrs:
      name: "authentik default Google Workspace Mapping: User"
      # https://developers.google.com/admin-sdk/directory/reference/rest/v1/users#User
      expression: |
        # Google require givenName and familyName to be set
        givenName, familyName = request.user.name, " "
        formatted = request.user.name + " "
        # This default sets givenName to the name before the first space
        # and the remainder as family name
        # if the user's name has no space the givenName is the entire name
        if " " in request.user.name:
            givenName, _, familyName = request.user.name.partition(" ")
            formatted = request.user.name
        return {
            "name": {
                "fullName": formatted,
                "familyName": familyName.strip(),
                "givenName": givenName.strip(),
                "displayName": formatted,
            },
            "password": request.user.password,
            "suspended": not request.user.is_active,
        }
  - identifiers:
      managed: goauthentik.io/providers/google_workspace/group
    model: authentik_providers_google_workspace.googleworkspaceprovidermapping
    attrs:
      name: "authentik default Google Workspace Mapping: Group"
      # https://developers.google.com/admin-sdk/directory/reference/rest/v1/groups#Group
      expression: |
        return {
            "name": group.name,
        }