...
Create a user account for the service account to impersonate
Navigate back to the directory Directory in the left menu of Google Workspace and click “Add new user”.
...
Suggested values:
First name: jira
Last name: read
Primary email address: "jira-read@<yourdomain.com>"
...
Now you need to choose the correct READ privileges.
Scroll down to Admin API Privileges and select:
Users > Read and
Groups > Read.
Then click CONTINUE
Review that you have got the correct privileges. Then click CREATE ROLE.
...
Search for the impersonation account you created earlier. We have chosen to call the account in this example jira-dev-read. Click ASSIGN ROLE.
...
Complete the setup in Kantega SSO Enterprise
...
The domain of your Google directory with just the domain name like http://
company.comThe Google customer ID
A JSON key file created on the service account
The email address of the impersonation account to be used by the service account for reading the Google APIs
...