[NOT STRICTLY CFML, but related…] Wondering if anyone else has solved this: after hours of Google-fu trying to find an answer, for any of you who have apps using Google OAuth2 logins - are you to easily query either a) if a logged in user is a member of a particular Google group (in your domain), or b) get a list of groups (in your domain) so you can check for membership? Oddly enough, I can’t find good info online except that perhaps another delegated account with admin privileges needs to do the checking. As though an application with a proper access token (and the right scope) shouldn’t be able to get that info? I’m using a CFML Google script set up for the OAuth2 processing - hence the posting here.

I have not touched OAUTH for a while but in general there is no concept of groups, however there may be a scope that you can request that contains the info, have a look here https://developers.google.com/identity/protocols/oauth2/scopes you never know what you might find