I finally figured out how to modify user onboarding to work with Google SSO. Firebase makes it super easy to implement, but I had to move user provisioning to after the login redirect.
The biggest upside to Google SSO is that I don't have to validate email addresses. :D