A comprehensive CLI-based skill for managing Google Cloud Identity groups, memberships, SSO profiles, and mobile device security.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install gws-cloudidentity
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install gws-cloudidentity using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is gws-cloudidentity?
The gws-cloudidentity skill provides a robust interface for interacting with the Google Cloud Identity API. It enables administrators and developers to programmatically manage the lifecycle of organizational resources, including identity groups, user invitations, and enterprise security settings. This skill is part of the broader ecosystem of Openclaw Skills designed to bring enterprise-grade cloud management directly into automated workflows.
By leveraging this skill, users can handle complex identity tasks such as configuring Inbound SAML/OIDC SSO profiles and managing device security policies without navigating the web console. It serves as a bridge between high-level intent and the technical execution of Google Cloud Identity management.
gws-cloudidentity Use Cases
- Automating the creation and deletion of identity groups and memberships.
- Performing remote wipes on company-owned devices in emergency scenarios.
- Auditing and listing all registered devices within a customer namespace.
- Programmatically updating security settings and Inbound SSO assignments for organizational units.
- Managing user invitations for Cloud Identity customers.
How gws-cloudidentity Works
- The user provides a resource (like groups or devices) and a specific method (like create or wipe).
- The skill utilizes the gws CLI to authenticate and authorize the request based on the gws-shared configuration.
- Developers use the gws schema tool to identify required parameters and JSON structure for the specific API call.
- The command is executed, interacting with Google Cloud Identity servers to perform the requested operation.
- Success or error messages are returned, allowing for further automation or logging within the environment.
gws-cloudidentity Setup
To get started with this skill, ensure the gws binary is installed and configured correctly within your Openclaw Skills environment.
# Generate the necessary skill files if not already present
gws generate-skills
# Review the shared authentication and security rules
# (Refer to gws-shared/SKILL.md for details)
# Test the installation by browsing available resources
gws cloudidentity --help
gws-cloudidentity Data Schema & Taxonomy
The skill interacts with several primary data resources, each with specific metadata structures:
| Resource | Description | Key Fields |
|---|---|---|
| Groups | Identity group entities | name, display_name, description, labels |
| Devices | Company-owned hardware metadata | deviceId, model, os_version, serial_number |
| SSO Profiles | SAML/OIDC configuration | issuer, ssoUrl, certificates |
| Memberships | Group-to-user associations | memberKey, roles, name |
gws-cloudidentity Advanced Features
- Support for Multi-party approval (MPA) for sensitive actions like SSO profile updates.
- Detailed schema inspection via gws schema for precise control over JSON flags.
- Capacity to cancel pending device wipes if the command has not yet reached the device.
- Flexible searching and querying for group resources using custom query syntax.
SKILL.md
Loading
Related Openclaw Skills
Google Apps Script (gws-apps-script)
A CLI-driven skill to manage, deploy, and execute Google Apps Script projects using the Openclaw Skills framework.
Google Apps Script Push
A command-line skill for pushing local script files directly to Google Apps Script projects.
Google Workspace Alert Center (gws-alertcenter)
A specialized skill for interacting with the Google Workspace Alert Center API to manage security notifications and organizational alert settings.
Proactive Claw Integrations
A specialized collection of network and automation extensions designed to enrich core agent capabilities with external context and team coordination.
GWS Groups Settings
A specialized tool for programmatically managing Google Groups settings and access policies through the GWS CLI.
gws-licensing
A powerful utility for programmatically managing Google Workspace Enterprise product licenses and user SKU assignments via the gws CLI.
Featured*
