Google Cloud Platform

First, add Unfurl as an Identity Provider. Then it's just these three lines in your app.

const provider = new firebase.auth.OAuthProvider('oidc.unfurl');
provider.addScope("roles");
firebase.auth().signInWithPopup(provider);

A full example page can be found here.