Google Workspace

This section outlines how Google Workspace is integrated to provision users and groups.

This integration supports the synchronization of Users, User Groups, and all associated attributes, including custom attributes, directly within the platform. Administrators can also leverage built-in Attribute Mapping capabilities to align Google Workspace attributes with Forcepoint’s identity model, ensuring accurate and efficient provisioning without external tools.

  1. Navigate to Admin > User Provisioning > Google Workspace and click Connect Google Workspace.

  2. Fill in the form with Google Workspace Admin User email address, Description, attach the JSON key file and click Connect.

    Steps to generate the JSON License Key in Google Workspace

    1. Enable Admin SDK API
      • In Google Cloud Console, enable Admin SDK API for your project.
    2. Create a Service Account
      • Go to IAM & Admin > Service Accounts, create a new account, and assign a suitable role (e.g., Project Editor).
    3. Generate JSON Key
      • In the service account, create a new key in JSON format and download it — this is your license key.
    4. Enable Domain-Wide Delegation
      • In the service account settings, enable Domain-wide delegation and copy the Client ID.
    5. Authorize OAuth Scopes in Admin Console
  3. Test the connection using the Test Connection button to ensure the setup is correct.

Auto-Sync Provisioning: Toggle Auto-Sync Provisioning to Enabled to automatically synchronize users and groups at least once every 24 hours.
Note: By default, Auto-Sync Provisioning is Disabled.

Sync Status: Provides the Last Sync information, Next Sync information, displays the number of synced Users and groups.

Provisioning Configuration:
  • User Sync: Toggle to Active to allow synching user accounts from Google Workspace.
  • User Attributes: Enable if you want to sync additional user details (For example, custom attributes).
  • Group Sync: Toggle to Active to manage user groups.
  • Group Attributes: Enable if you want to sync additional group details.

Save Configuration: Click Save Configuration to apply all changes.

Run Sync now: To sync immediately, click Run Sync now.

Note: Before clicking Run Sync now button, user should configure the Provisioning Configuration, including Identity Mapping and click Save Configuration.
Attention: We recommend that the admin user refrain from updating users or user groups until the initial synchronization completes.

Platform documentation now has detailed steps for configuring SAML profile for Google Workspace.