How do I retrieve all mobile devices? - google-admin-sdk

I want to retrieve all mobile devices under my G Suite domain. So I tried on "Try this API" with an account that was granted the "Super Admin" role.
I can retrieve 109 devices on Admin Console.
Admin Console - Devices - Mobile Devices
https://admin.google.com/ac/devices/list?category=mobile
But, I can retrieve only 5 devices via API.
Mobiledevices: list  |  Directory API  |  Google Developers
https://developers.google.com/admin-sdk/directory/v1/reference/mobiledevices/list?apix_params=%7B%22customerId%22%3A%22my_customer%22%7D
customerId = my_customer
Is it correct behavior?
How do I retrieve all mobile devices via API?

Related

Whitelabel Django Application and connecting Google and Facebook accounts

We have a web application that runs on say domain.com. We then have whitelabel users that access the application from subdomain.theirdomain.com.
Our application is able to connect Google, Facebook, Twitter accounts using our main domain (domain.com) and our integration with each platform.
But when whitelabel users want to connect the process shows the name of our application and redirects to our domain (breaking whitelabel).
We are looking at creating a generic application on each platform (google, facebook etc) for our whitelabel users on generic domain xyz-connector.com with a generic name and logo.
However the users are not logged in on that domain so when the platform redirects to that domain after the user has successfully gone through the authorization\connection process we cannot associate the connection with the user.
We need to know which account has just authenticated so we can update the database.
Using Django 3.1.
Ideally we want our users to connect\authenticate their accounts directly from their white labeled subdomain or domain. Rather than having to login to xyz-connector.com.
Can we share sessions? Or do these services (facebook, google) allow us to pass custom variables they will pass back to us when connecting that we can use to associate the users account?
Is there a best practice for achieving this?

Configure AWS cognito for federated sign-in to get authenticated through microsoft account (live.com)

I'm trying to configure my AWS cognito User pool for federated sign-in for microsoft users. I've followed this article.
https://aws.amazon.com/blogs/security/how-to-set-up-amazon-cognito-for-federated-authentication-using-azure-ad/
This authentication flow is working only for the users who are associated with specific enterprise application created inside Azure AD. I have multiple clients who are having their own Azure AD instances for maintaining their users and handling authentication. I need to onboard those users in my application using federated sign-in. Hence I'm trying to give a generic button to end users to Login with Microsoft. Can someone please suggest the direction?

Is it possible to change the gcloud sdk's oauth app?

I am using gcloud auth login + container clusters get-credentials to e.g. fetch credentials for a kubernetes installation. This works great ;).
But whenever gcloud auth login is called a oauth browser is shown, which presents:
That's ok! I was wondering if it's possible to change the oauth app used in this screen from "google cloud sdk" to a company wide application? E.g. we have a OAuth Enabled Google Project and I would like my co workers to „allow“ this app and not the generic „google cloud sdk“.
PS: I am aware of the fact that there are service accounts for headless login -> but I want the user to authenticate personally
This screen doesn't belong to "google cloud sdk" app, it's part of OAuth2 flow. Here it's the explicit permissions flow: It ask the user to consent the permissions to the app (name "client" in the OAuth doc).
So, here it's the Google identity provider which present this page. And you can't customize it.

Creating Application for other enterprise to SSO and list directory users?

I am trying to create a web application. This app is a B2B PAS model.
One of the features of the app is, an organization using GSuite, can onboard our system and then all its users can log in to our software using their org's google ids. However, in the application, one user can assign task to another user in org. So our application should be able to list all users of the org too.
How can both these features be achieved?
I have tried the SAML approach, by creating a custom app from Gsuite admin console. However, can SAML be extended to also list users from the organizations which the SAML app belongs to? (Basically trying to use the Google Cloud Directory API)
What other alternative approaches should I look for if pure SAML doesn't work out?
P.S tech stack I'm using is Nest JS for backend and Angular for frontend
If I am understanding properly you are looking for the way to populate all users/ID from organization to your SAML App. Single sign-on (SSO) allows users to sign in to enterprise cloud applications using their managed Google account credentials, more details here in set up your own custom SAML application. It is also possible to Set up SSO using 3rd party IdPs.
However, Google supports several industry standard protocols like OAuth 2.0, OpenID Connect 1.0 and SAML 2.0 for handling authentication, authorization, and single sign-on. You can take a look at authenticating corporate users in a hybrid environment for more details.

Google Reseller Api access data to customers

I am new to Google Reseller API. Google Reseller API access data to customers from My Reseller Account without authorization.
Scenario:
I am adding a license of 1 user which needs to show to customer as soon as it looks like standalone of Own Reseller.