探花大神

Contact Us
Help Center Home > Apps and Integrations > Get Started: Google Workspace Integration

Get Started: Google Workspace Integration

The Google Workspace Integration allows for secure and consistent connectivity between 探花大神 and Google Workspace. The integration allows an IT Admin to manually provision new user accounts, schedule imports of new users and updates, and continuously synchronize specified user attributes from 探花大神 to Google or from Google to 探花大神. In addition, admins can manage distribution groups in Google Workspace from 探花大神.

Integrating Google Workspace with 探花大神

You can integrate Google Workspace and 探花大神 in two different integration scenarios that offer the same benefits. To start configuring the integration, ensure you have reviewed the prerequisites and important considerations.

User Integration Scenarios

  1. 探花大神 manages user identities:
    • 探花大神 takes over existing Google Workspace accounts 
    • 探花大神 provisions new Google Workspace accounts
  2. Google manages user identities:
    • Google Workspace takes over 探花大神 accounts
    • Google Workspace provisions new 探花大神 accounts

Benefits

  • Secure, persistent connectivity between 探花大神 and Google Workspace
  • A convenient way to import pre-existing Google accounts into 探花大神
  • Automatic provisioning of new 探花大神 accounts into Google Workspace
  • Continual user attribute synchronization from 探花大神 to Google accounts
  • Accessible self-service account management for your end users
  • Simplified login experience:
    • Create a login experience similar to SSO where users log in to 探花大神 and Google Workspace using the same set of credentials
    • Combine this integration with an SSO integration, or IdP configuration, to allow for federated user logins to either system

Prerequisites

  • A 探花大神 administrator account
  • 探花大神 Device Package or higher
  • An active Google Workspace directory
    • Google Workspace directories can contain multiple domains
  • Either a Google Super Admin (if you need to sync passwords for users with Super Admin privileges) or a dedicated Google user for the integration with these roles:
    • Groups Admin (pre-built role)
    • User management Admin (pre-built role)
    • Custom role with 鈥楧omain Management鈥� admin API privileges

Warning:

Using a person's Google user account for authorizing the integration may cause the integration to break if the person leaves the org or if the roles/ privileges change.

  • One of the following supported licenses:
    • Google Workspace Business edition
    • Google Workspace Education edition
    • Google Workspace Enterprise edition
    • Legacy G Suite Business
    • Legacy G Suite Basic
      • This license requires a valid payment source for user additions
      • Ensure that you validate the billing contact
      • Pending actions need to be completed for password sync to function properly

Warning:

Google Workspace for Non Profits, Google Workspace Essentials Starter, and G Suite Legacy Free Edition aren't supported. This is a Google restriction; Google only provides their User Access API to paid licenses.

Considerations

  • Don鈥檛 add a Google Workspace directory more than once in 探花大神. If you authorize sync for the same Google Workspace directory more than once, users that are connected to multiple instances of the same Google Workspace directory in 探花大神 could be suspended if you remove them from one of the instances. You can avoid this by deactivating the sync for duplicate Google Workspace directories.
  • Synchronization occurs by matching the user's 探花大神 email address with the Google Workspace primary email address or any of a user's Google Workspace alias email addresses.
  • Some user attributes are always synced with Google Workspace. Admins should also review and choose additional user attributes prior to importing/exporting users via the integration. See Configure the Google Workspace Integration to learn more.
  • If you are syncing user data from 探花大神 to Google, we recommend that you change user emails in the 探花大神 Admin Portal.
  • If you change the email domain in 探花大神 for a linked account to a domain outside of the synced Google Workspace directory, you could cause the user information to stop syncing unless you have configured a list of domains and specified one to use as the default for the integration. See Maintain the Google Workspace Integration to learn more.
  • Most changes users make to their personal attributes in the User Portal will sync to Google Workspace if those attributes are set to sync on export. See Configure the Google Workspace Integration to learn more.
  • Regardless of the user state or Password Configurations security settings in 探花大神, users must be unbound from the Google Workspace Cloud Directory Integration in 探花大神 directory to guarantee that 探花大神 will stop syncing (exporting) information for that user to Google.

Warning:

Users who are unbound from Google Workspace Cloud Directory integration in 探花大神 will be deactivated in Google.

  • Users should be unbound from your Google Workspace Cloud Directory Integration in 探花大神 before they are deleted in Google. This prevents the user being recreated on the next sync from 探花大神

Google Workspace Integration Configuration Workflow

Warning:

Using a person's Google user account for authorizing the integration may cause the integration to break if the person leaves the org or if the roles/ privileges change.

  1. Prepare for the Google Workspace Integration
    • Review considerations and complete prerequisites
    • Create a dedicated Google service account for the integration with the following required roles:
      • Groups Admin (pre-built role)
      • User management Admin (pre-built role)
      • Custom role with 鈥楧omain Management鈥� admin API privileges
    • Add a new Google Workspace Cloud Directory Integration
  2. Configure the Google Workspace Integration
  1. Use the Google Workspace Integration