EVO: Sync with Google Workspace
01/02/2025 0 People found this article helpful 1,703 Views
Description
Requirements
These instructions assume:
- Organization configured for Google Workspace.
- All users have been created under Google Workspace.
- All users have a unique email address, specific to their user.
- All users are a member of a group to be synced.
- The user(s) in question exist locally on the workstation.
Google Workspace configuration
- Go to https://console.cloud.google.com/
- Create a new project under your domain.
- Navigate to API & Services.
- From the left-side navigation, click Library.
- Search for the "Admin SDK API".
- Enable the Admin SDK API if it is not already enabled, and head back to dashboard.
- Before we continue, we also need to create an OAuth Consent screen for the new Google Workspace Project.
- While in the project, click OAuth Consent Screen.
- Select Internal and Create.
- Fill in the fields with your correct information. When you get to the Authorized domains portion, enter "evosecurity.com"
- Save and continue.
- Next, we will set the following Scopes. Refer to Screenshot for the scope information that should be set. All of these are found within the same Add or Remove Scopes screen.
- Non-Sensitive Scopes:
- .../auth/userinfo.email
- .../auth/userinfo.profile
- openid
- Sensitive Scopes:
- .../auth/admin.directory.user.readonly
- .../auth/admin.directory.user.alias.readonly
- .../auth/admin.directory.group.readonly
- .../auth/admin.directory.orgunit.readonly
- Once this is done, let's head back to the credentials and create a new OAuth 2.0 Client.
- Click Create Credentials and create a new OAuth Client ID.
- Select Web Application.
- Name the app what you would like, then add the following Authorized JavaScript origins and Authorized redirect URIs:
- For Authorized JavaScript origins add:
- https://your-environment-url.evosecurity.com
- For Authorized redirect URIs add:
- https://your-environment-url.evosecurity.com
- https://your-environment-url.evosecurity.com/oauth2callback
- Click Create.
- Once that's done, you'll get your Client ID and Client Secret.
- In another tab, login to your Evo Portal.
- From the left nav menu, select My Company. Alternatively, select Customers and and choose a customer from the list.
- Select Directories.
- Click "Add New Directory" and select the Google Workspace option.
- Enter a directory name.
- Download the JSON and you will copy/paste the content from that JSON into your Evo Security admin portal under the Paste JSON Client Secret.
- Once entered, click "Get OAUTH Code" and you'll be redirected to sign into your Google Workspace account.
- Sign in, accept the integrations, and you'll be given the OAuth Code.
- Paste that into the OAuth field and create your Google Workspace Directory!
Now that you’ve completed the configuration for Google Workspace, your users will be able to authenticate with Evo.
Related Articles
Categories
Was This Article Helpful?
YESNO