Allow default provider config for tenants

[sww314]

I am using the python admin SDK to create tenants, but I can not manage the "default" providers. Only add new SAML and OIDC providers.

            tenant = tenant_mgt.create_tenant(
                tenant_name,
                allow_password_sign_up=True,
                enable_email_link_sign_in=False,
                app=app,
            )
            
          auth = tenant_mgt.auth_for_tenant(tenant.tenant_id)
          
          # No way to do this ???
          providers = auth.get_providers()
          # enable/setup Google provider

Now I have to go in the UI and click a button. Which defeats the purposes of creating the tenant programmatically if I still have to set it up by hand.

This is what I am trying to change:

EDIT:
You can set allow_password_sign_up=True and it will enable Email/Password, but unsure how to handle the other Providers. We use the Google Provider as an internal app for our own login as we are on Google Workspace.

[google-oss-bot]

I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.

[jackstruck]

For those who arrive here looking for an answer, we were able to successfully implement the following solution copied directly from Shahar Glazner's response on StackOverlow here.

gcp_project = YOUR_PROJECT_ID
google_client_id = YOUR_GOOGLE_CLIENT_ID
google_client_secret = YOUR_GOOGLE_CLIENT_SECRET

def enable_google_idp(self, tenant_id: str):
    """
    Enables the Google SSO for a tenant

    :param tenant_id: the id of the tenant
    """
    app = firebase_admin.initialize_app()
    tenant_url = f"projects/{gcp_project}/tenants/{tenant_id}"
    url = f"https://identitytoolkit.googleapis.com/v2/{location}/defaultSupportedIdpConfigs?idpId=google.com&key={api_key}"
    payload = {
        "clientId": google_client_id,
        "clientSecret": google_client_secret,
        "enabled": True,
        "name": f"projects/{gcp_project}/defaultSupportedIdpConfigs/google.com"
    }
    authenticated_session = google.auth.transport.requests.AuthorizedSession(app.credential.get_credential())
    resp = authenticated_session.post(url=url, json=payload)
    # raise if something failed
    resp.raise_for_status()
    return True