{"action":"created","issue":{"url":"https://api.github.com/repos/hashicorp/vault/issues/646","repository_url":"https://api.github.com/repos/hashicorp/vault","labels_url":"https://api.github.com/repos/hashicorp/vault/issues/646/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/646/comments","events_url":"https://api.github.com/repos/hashicorp/vault/issues/646/events","html_url":"https://github.com/hashicorp/vault/issues/646","id":108415894,"number":646,"title":"Google Apps Authentication Backend","user":{"login":"apparentlymart","id":20180,"avatar_url":"https://avatars1.githubusercontent.com/u/20180?v=4","gravatar_id":"","url":"https://api.github.com/users/apparentlymart","html_url":"https://github.com/apparentlymart","followers_url":"https://api.github.com/users/apparentlymart/followers","following_url":"https://api.github.com/users/apparentlymart/following{/other_user}","gists_url":"https://api.github.com/users/apparentlymart/gists{/gist_id}","starred_url":"https://api.github.com/users/apparentlymart/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/apparentlymart/subscriptions","organizations_url":"https://api.github.com/users/apparentlymart/orgs","repos_url":"https://api.github.com/users/apparentlymart/repos","events_url":"https://api.github.com/users/apparentlymart/events{/privacy}","received_events_url":"https://api.github.com/users/apparentlymart/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":13,"created_at":"2015-09-25T22:10:59Z","updated_at":"2018-03-14T21:57:22Z","closed_at":"2018-03-14T21:57:22Z","author_association":"NONE","body":"[Google Apps for Business](https://www.google.com/work/apps/business/) (and its variants like \"for Education\") allows companies to outsource employee user account management to Google, allowing employees single sign-on to various Google services and Google-integrated services.\n\nPart of this offering is a user account directory, which includes groups that users can be assigned to, giving a similar set of capabilities to those present in [the GitHub auth backend](https://vaultproject.io/docs/auth/github.html) for organizations that are using Google Apps.\n\nGoogle Apps also has the additional feature [Domain-wide Delegation of Authority](https://developers.google.com/admin-sdk/directory/v1/guides/delegation), which allows an app to be given access to interact with the domain as a whole rather than specific users within the domain. This allows an application like Vault to represent the domain and use user/group relationships to grant access.\n\nThis, in conjunction with [the OpenID Connect flow for Installed apps](https://developers.google.com/identity/protocols/OAuth2InstalledApp), could help organizations already using Google Apps to integrate Vault into their workflow without having to manage a new credentials store.\n"},"comment":{"url":"https://api.github.com/repos/hashicorp/vault/issues/comments/373188506","html_url":"https://github.com/hashicorp/vault/issues/646#issuecomment-373188506","issue_url":"https://api.github.com/repos/hashicorp/vault/issues/646","id":373188506,"user":{"login":"jefferai","id":28627,"avatar_url":"https://avatars0.githubusercontent.com/u/28627?v=4","gravatar_id":"","url":"https://api.github.com/users/jefferai","html_url":"https://github.com/jefferai","followers_url":"https://api.github.com/users/jefferai/followers","following_url":"https://api.github.com/users/jefferai/following{/other_user}","gists_url":"https://api.github.com/users/jefferai/gists{/gist_id}","starred_url":"https://api.github.com/users/jefferai/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jefferai/subscriptions","organizations_url":"https://api.github.com/users/jefferai/orgs","repos_url":"https://api.github.com/users/jefferai/repos","events_url":"https://api.github.com/users/jefferai/events{/privacy}","received_events_url":"https://api.github.com/users/jefferai/received_events","type":"User","site_admin":false},"created_at":"2018-03-14T21:57:22Z","updated_at":"2018-03-14T21:57:22Z","author_association":"OWNER","body":"@tomwilkie Nice! Closing in favor of that."}}
{"actor":{"display_login":"jefferai"}}