Search code examples
authenticationgoogle-drive-apiokta

Making Google Drive API requests using Okta authentication

I'm looking for the best practice to make requests as a third-party app to Google Drive's APIs that are authenticated with Okta.

Assumptions:

  1. Google's services are being authenticated using Okta (User go to drive.google.com >> redirect to Okta >> authentication >> Google Drive is available).
  2. We have a public app on Google - all works easily for non-Okta users.

What will be the best practice solution? Creating an Okta app? Exchanging access tokens in runtime? Something else?

Solution

  • After investigating the main role of Okta in Google Workspace, I found that OAuth 2.0 works as same as it works if Google authenticates the user.

    You should trigger a simple authentication with Google, which by the end of the process, you'll receive an access token you can use.

    Actually, Google uses SMAL to authenticate the user and then show a consent screen for additional scopes.

    Graphic flow in here