Hi all, I tried configuring Google Workspace SSO with a JSON key, but I keep getting an “Invalid Input” error. Any ideas?
24 Views
Replies (4)
Marked SolutionPending Review
Hexnode Expert
1 week ago
Jan 28, 2026
Marked SolutionPending Review
Hey @famk_e , thanks for reaching out.
Make sure the email you entered in the Google Workspace Admin Email field has Super Admin privileges in the Google Admin Console. A standard user or a regular “Admin” role often isn’t enough.
Marked SolutionPending Review
Participant
1 week ago
Jan 28, 2026
Marked SolutionPending Review
I’ve given the correct email with Super Admin privileges, and the JSON key was created properly, but I’m still getting the same error.
Marked SolutionPending Review
Hexnode Expert
1 week ago
Jan 28, 2026
Marked SolutionPending Review
Understood. In that case, the issue might be with the OAuth scopes you provided under API client authorization in the Google Admin Console. These scopes are tied to the client ID you copied from the JSON file. You need to provide the OAuth scopes separated by commas, as even a typo or missing comma will cause the handshake to fail. You can copy and paste the following scope links exactly as shown:
- https://www.googleapis.com/auth/admin.directory.user– To sync individual users.
- https://www.googleapis.com/auth/admin.directory.group – To sync user groups.
- https://www.googleapis.com/auth/admin.directory.domain – To fetch the domain.
Regards,
Simon Scott
Hexnode UEM
Marked SolutionPending Review
Participant
1 week ago
Jan 28, 2026
Marked SolutionPending Review
Ah, now I fixed the error! The issue was with the scopes.
Thanks, @simon_scott
Save
