Currently, users must pre-exist in the Google Apps account for single-sign on integration with Crowd.

Google Apps exposes a provisioning API to allow applications to create/update/delete accounts in Google Apps. Crowd could use this API to automatically create a user in Google Apps when the user authenticates for the first time with Google Apps.