AuditClaw IDP

Companion skill for auditclaw-grc. Collects compliance evidence from Google Workspace and Okta identity providers using read-only API calls.

8 checks | Read-only API access | Evidence stored in shared GRC database

Security Model

Read-only access: Google Workspace uses admin.directory.user.readonly scope only. Okta uses okta.users.read, okta.factors.read, okta.policies.read scopes only. No write/modify permissions.
Credentials: Uses standard env vars for each provider. No credentials stored by this skill.
Dependencies: Google API client + requests (all pinned in requirements.txt)
Data flow: Check results stored as evidence in ~/.openclaw/grc/compliance.sqlite via auditclaw-grc

Google Workspace: Service account JSON with domain-wide delegation, admin email for impersonation
Okta: API token (SSWS) with read-only scopes
pip install -r scripts/requirements.txt
auditclaw-grc skill installed and initialized