Allow users to configure Google domain in SaaS Sentry

[rodolfoBee]

Problem Statement

As for now, when the organisation owner configures SSO using Google only users under the same domain as the owner are able to authenticate and login into Sentry.

If the organisation has or wants to have multiple domains, they need to contact support as detailed in here: https://docs.sentry.io/product/accounts/sso/#google-business-app.

The downside of the current setup is that the customer needs to wait for the support team to reach the request, and during this period users are unable to authenticate with Sentry. The agent taking the ticket still needs to confirm: if the request is coming from an owner, if the domain is provided, if there are any issues after the change, and so on.

Not demanding tasks, but it still takes time and is something that should be possible from the user side.

Solution Brainstorm

Allow users to add/remove domains via Organisation Settings -> Auth page.

[getsantry]

Routing to @getsentry/enterprise for triage, due by Tue Jan 24 2023 01:00:00 GMT+0000. ⏲️

[leedongwei]

Yep, agreed on this. Thanks for calling it out.

[dashed]

If the organisation has or wants to have multiple domains, they need to contact support as detailed in here: docs.sentry.io/product/accounts/sso/#google-business-app.

We also have a help center article on this here: https://help.sentry.io/account/account-settings/do-you-support-sso-with-multiple-domains/

[github-actions]

This issue has gone three weeks without activity. In another week, I will close it.

But! If you comment or otherwise update it, I will reset the clock, and if you label it Status: Backlog or Status: In Progress, I will leave it alone ... forever!

---

"A weed is but an unloved flower." ― Ella Wheeler Wilcox 🥀

[rodolfoBee]

Another feature to implement with this is to also allow the removal of existing domains.

The current process is to disable SSO completely and configure it again as our internal tools do not seem to support the option to remove a domain.