My usecase is building a custom salesforce connector that can be used by Gemini Enterprise users. For iDP we used Google workspace based authentication / native Google Identity Platform
I am reading this documentation link about building a custom connector. What is not clear is the authentication and authorization part. From what i understand both the GE app end user and the custom connector needs to get authenticated and authorized.
The heading “ACLs and Identity mapping” in the above link mentions 2 methods to setup Authn and Authz. Is PureACLs the way to go for my use case since I am using google workspace account as an iDP?
Also link does not mention the deployment options for the custom connector. I know GCP marketplace is the ideal solution but we want to release it as a private connector. Do i need to package the connector code as a Cloud Run service?
Note:- The custom connector would be ingestion based not federated so any recommendations here