From 8c7226c05010a1788521d6458755c56b6a38e550 Mon Sep 17 00:00:00 2001 From: Bethuel Mmbaga Date: Wed, 1 Apr 2026 16:27:49 +0300 Subject: [PATCH] Add legacy Google Workspace IdP migration notice (#676) --- .../managed/advanced/google-workspace.mdx | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/src/pages/selfhosted/identity-providers/managed/advanced/google-workspace.mdx b/src/pages/selfhosted/identity-providers/managed/advanced/google-workspace.mdx index 7617d85f..a9bb0bc1 100644 --- a/src/pages/selfhosted/identity-providers/managed/advanced/google-workspace.mdx +++ b/src/pages/selfhosted/identity-providers/managed/advanced/google-workspace.mdx @@ -1,7 +1,13 @@ -import {Note} from "@/components/mdx"; +import {Note, Warning} from "@/components/mdx"; # Google Workspace SSO with NetBird Self-Hosted (Legacy) + +The client secret has been removed from the authentication flow. The secret was originally included to support providers like Google Workspace that don't offer a proper PKCE flow, but this is no longer necessary with the embedded IdP. + +If you are using this standalone Google Workspace setup, we strongly recommend migrating to the [embedded IdP setup with Google as an external provider](/selfhosted/identity-providers/managed/google-workspace#management-setup-recommended). The embedded IdP approach is simpler, fully supported, and does not rely on the deprecated client secret. + + Use Google accounts for authentication with NetBird. This supports both personal Google accounts and Google Workspace (formerly G Suite) organizations. ## Standalone Setup (Advanced)