search

cisagov / ScubaGoggles

SCuBA Security Configuration Baselines and assessment tool for Google Workspace
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
128 stars 13 forks source link

possible issue with documentation #291

Closed rbailey64 closed 1 month ago

rbailey64 commented 1 month ago

Under the "Create an OAuth credential" documentation, we are asked to move the resulting "client_secret*.json" file into the root directory folder of the repo and rename it "credentials.json"

Then under the "Using a Service Account" section, we are asked to move the resulting "*.json" into the root directory folder of the repo and also rename it "credentials.json"

You can't have two files in the same root directory with the same name. I guess I am missing something?

jkaufman-mitre commented 1 month ago

@LaurenBassett and @adhilto Do you know how to fix this issue?

adhilto commented 1 month ago

Hi, thanks for reaching out. Yes, ScubaGoggles supports authentication via either OAuth or service account, but not both simultaneously. In retrospect I can see how we could have made that more clear. So @rbailey64, what I'd recommend you do is decide which authentication method works best for your use case and just follow the instructions in either the "Create an OAuth credential" section or the "Using a Service Account" section, but not both.