Motivation

Since the Google Workspace update in August 2020, it has become possible to use certain Admin APIs (such as the Groups API) with a service account without domain-wide delegation (impersonation).
In such cases, the google-admin-email parameter is not used, but the Google provider in OAuth2 Proxy currently requires it.

Reference:
https://workspaceupdates.googleblog.com/2020/08/use-service-accounts-google-groups-without-domain-wide-delegation.html

Possible solution

Utilize direct Google Admin API access without impersonation.

Provider

• Google