This isn’t true, (it’s not really documented), but you can do ?auth=<id_token>1Tyler RockwoodMichael LugassyFollowAug 9, 2017 · 1 min readmy words exactly. you have to pass the token, why? the user is already authenticated on my domain.