title: Retrieve Google Auth tokens from Okta sign-in?
body: <p>I have an application that relies on access to Google Calendar.  And, until now, I have authed through a &quot;Sign in with Google&quot; option, requesting the needed Calendar scopes.</p>
  <p><strong>What I'm trying to accomplish:</strong> I would like allow Okta customers the ability to authenticate (mostly so I can support the SCIM management).  The trouble is I am not clear on how to retrieve the needed Google auth credentials to access the Google Calendar API.</p>
  <p><strong>Where I'm at, so far:</strong>
  In my own Okta instance, I have successfully configured Google as an IDP, as well as an Okta app (tile), and can authenticate (OIDC) into Okta with my Google credentials, from my Node app.  However, the returned <code>external_id</code>, <code>access_token</code>, and <code>refresh_token</code> are all relevant to Okta, not Google.</p>
  <p><strong>The Question:</strong>
  Is there a way to get the needed Google authorization elements, both <code>access_token</code> and <code>refresh_token</code>, from my handshake with Okta?</p>