Configure life cycle management for Google Workspace

About Google Workspace

Google Workspace is a cloud-based productivity suite developed by Google, designed to help teams collaborate more efficiently. Google Workspace includes a variety of tools and services such as Gmail, Google Drive, Google Docs, Google Sheets, Google Slides, Google Meet, Google Calendar, Google Chat, and more.

By integrating Google Workspace with ManageEngine Identity360, you can enable the following life cycle management capabilities.

  • Import/Sync  

    Import and synchronize user accounts, OUs, groups, and roles from Google Workspace into the Identity360 portal, manage them in Universal Directory, and then sync them to other directories and applications. This enables admins to oversee all user-related actions from a single console.

  • Provisioning  

    Provision and modify users' access and account attributes across enterprise applications based on their role changes in Google Workspace. Provisioning and orchestration eases onboarding and life cycle management, boosting productivity and efficiency.

  • Access management  

    Manage the roles and permissions of users in Google Workspace from the Identity360 portal. Enforce least privilege and reduce security risks by granting users only the necessary permissions they need to perform their jobs.

Provisioning features supported

  • Creation: A new account will be automatically created in Google Workspace when a user is provisioned to that application in Identity360.
  • Modification: Modify users' roles in Google Workspace as and when their profiles get modified in Identity360.
Note: Once you enable provisioning for Google Workspace, user creation or modification will automatically happen as and when users are created and modified in Identity360.

The following steps will help you configure the supported life cycle management capabilities for Google Workspace from Identity360.

Prerequisites

  1. Log in to Identity360 as an Admin or Super Admin.
  2. Log in to Google Workspace as an Admin or as a user with Admin privileges.

Configuration steps

  1. Navigate to Applications > Application Integration and click Create New Application.
  2. Select Google Workspace from the applications displayed.
    Note: You can also find Google Workspace from the search bar located at the top.
  3. Under the General Settings tab, enter the Application Name and Description, if necessary.
  4. Under the Choose Capabilities section, select the capabilities you wish to enable, and click Continue.
    Identity360 application configuration general settingsGeneral settings of SSO configuration for Google Workspace
    Note: If you select Provisioning or Access Management, the Import/Sync option will automatically be enabled. This is because the data imported or synchronized from an application is used for provisioning and access management capabilities.
  5. Under the Integration Settings tab, select a suitable Connection from the drop-down under the Application Connection section. If there are no existing preconfigured connections, click Create New Connection to set up a new connection.
  6. Click Save to complete configuring Import/Sync, Provisioning, or Access Management for the application.
    Connection selection for Google WorkspaceSelecting a connection for Google Workspace

Application Connection

An Application Connection is a link established between Identity360 and Google Workspace to automate the process of syncing, creating, or updating user accounts in Google Workspace. This ensures that user accounts, groups, OUs, and roles are consistently managed and synchronized between Identity360 and Google Workspace.

Steps to create Application Connection:

  1. After giving application-specific details, navigate to the Integration Settings tab. In the Connection pane, click Create Connection.
    Note: Alternatively, you can create and manage Application Connections by navigating to Applications > Application Connection > Create New Connection > Choose Google Workspace from the Application drop-down.
    New connection creation for Google WorkspaceCreating a new connection for Google Workspace
  2. In the configuration pane, enter the Connection Name.
  3. Click Authorize, and you will be redirected to the application's login page.
    Note: If you want to stop the authorization process, you can choose to Cancel it.
    Connection configuration for Google WorkspaceConfiguring connection for Google Workspace
  4. Log in with your Google Workspace admin credentials and consent to the list of required permissions.
    Google Workspace login with permissions consentConsent to permissions during Google Workspace login
  5. Once you have completed the authorization and logged in successfully, you will be redirected to Identity360 again, and the new Application Connection will be saved automatically. In case of any issues with establishing the connection, follow the steps for resolution here.
  6. You can test if the connection is active by clicking Test or reestablish the connection by clicking Reconnect.
  7. Click Save to complete the application configuration.
    Connection test for Google Workspace Testing the connection to Google Workspace

You have now successfully configured provisioning for Google Workspace, ensuring user accounts are automatically provisioned and synced to the application.


Don't see what you're looking for?

  •  

    Visit our community  

    Post your questions in the forum.

     
  •  

    Request additional resources  

    Send us your requirements.