Google Workspace

Use Google Workspaces Directory Services with GetTrusted

To configure your Google Workspaces as your Directory Provider we will need you to provide a valid service account with domain delegation, your administrative email, customer id, and domain. With this we will be able to distribute contacts based on your directory structure.

To get your Google Service Account for GetTrusted you can follow this guide.

  1. Go to Google Cloud Console and select IAM & Admin -> Service Accounts

  1. Select Create Service Account from the top of the list of service accounts.

Continue to create your account, with no permissions or principals with access. After you create your service account you will download its credentials as json, we will need this to configure your directory services. Also copy the client ID as we will need that in the next steps.

We need domain delegation permissions for this service account, and

To delegate domain-wide authority to a service account in Google.

  1. From your domain’s Admin console, go to Main menu menu > Security > Access and data control > API controls.

  2. In the Domain wide delegation pane, select Manage Domain Wide Delegation.

  3. Click Add new.

  4. In the Client ID field, enter the client ID obtained from the service account creation steps above.

  5. In the OAuth Scopes field, enter a comma-delimited list of the scopes for GetTrusted.

    https://www.googleapis.com/auth/admin.directory.user.readonly

    https://www.googleapis.com/auth/admin.directory.group.readonly

    https://www.googleapis.com/auth/admin.directory.orgunit.readonly

  6. Click Authorize.

Continue in GetTrusted Enterprise

Upload your service account json in the provided field, which will validate the json. After that you need to enter the administrator email of your Google Workspaces as well as your customer ID and your primary domain. Then click Test Configuration, once you have a successful test, you can save your configuration and move on to test your Single Sign-on and Directory Settings by completing a SSO login and continuing with setting up onboarding requirements.

PreviousConfigure Directory ServicesNextOkta Directory Provider

Last updated