User vpngroup mapping w/Cloud Identity Engine + Google G Suite/Workspace

[ricktait]

Hello all. I just cannot seem to get custom user vpngroup mapping working with Cloud Identity Engine + Google G Suite. My setup:

• PANOS 10.1.0
• Cloud Identity Engine directory setup & working to G Suite
• My user's vpngroup is set per-user with a G Suite custom text attribute named "vpngroup"
• Directory is syncing fine between Cloud and my onprem PA

How can I have that custom attribute map to the vpngroup setting within PANOS? 

When I look at Device -> User Identification -> Cloud Identity Engine -> <NAME> and try to select "vpngroup" as the Group Name within Group Attributes, I see only "Name, Common-Name, Mail, Distinguished Name" as options. How can I have custom attribute "vpngroup" show up? 

Thank you in advance!

-RMT