Google Workspace/G Suite Provisioning & Deprovisioning
Google Workspace User Provisioning by miniOrange enables you to provision all user identities and groups from miniOrange automatically in the Google Admin console. While initial setup requires a few manual steps, this service automates the ongoing user and group lifecycle management, which saves time, boosts productivity, and improves security by managing access privileges. This automation helps you streamline the process of creating, modifying, and removing user accounts and groups, ensuring that everyone in your organization has the right level of access to the tools they need to succeed.
miniOrange supports importing users and groups from Google Workspace (Inbound Provisioning). Once in miniOrange, these users and groups can be seamlessly provisioned (synced) to various other external applications using miniOrange's provisioning services. This makes miniOrange a central identity hub, ensuring consistent user and group data across all applications.
Prerequisites
Follow the Step-by-Step Guide given below to setup Google Workspace Provisioning
Step 1: Setup Provisioning Application in miniOrange
- Log in to the miniOrange Admin Console
- In the Configure section, select Apps.
- Under the Apps section, click on Add Application.
- Search for Google and select Google Provisioning App.
- Enter a display name for the app and click Save.
- Write your domain name and click on Verify Credentials.
- Log in with your Google Admin Account.
- Once logged in successfully, click the Allow button to authorize miniOrange to view and manage the provisioning of users on your domain.
- Once verification is complete, the Verify Credentials button will change to Reverify Credentials button.
Attribute Mapping
- Map the user Attributes between miniOrange and Google Workspace.
- Add custom attributes by clicking on Add a Row if necessary.
- Click on Save & Next.
Step 2: Importing Users from Google to miniOrange (Inbound)
- Choose the objects you want to import from Google Workspace.
- Check the required options and click on Import.
- Now users and groups are successfully imported to miniOrange.
- If you want to import users from groups, you can click on Sync User Group Assignments. Before doing this, make sure that the groups have already been imported.
Step 3: Provisioning Users from miniOrange to Google (Outbound)
This section outlines the process for provisioning (creating, updating, and deleting) user accounts and groups from miniOrange to Google Workspace.
Enable the provisioning features you require, such as:
- Create User
- Update User
- Delete User
- Password Sync
- Account Enable/Disable sync
- Create Group
- Delete Group
- Add/Remove group membership of user
Note:
User provisioning to Google Apps is based on Group Assignment Logic: When a user is added to the assigned group(s) in Group Assignments, they will be provisioned according to the features that have been enabled. You will configure these group assignments in the next steps.
Group Assignments
- Assign the Groups here that you want to provision to Google. Only users belonging to these assigned groups will be provisioned from miniOrange to Google Workspace.
- Select groups that you want to provision and click Save.
Create Users
- To create a user in miniOrange, Go to Users >> User List >> click on the Add User button.
- Fill out the user basic information and click on the Create User button.
- After creating a user, Go to Groups >> Manage Groups
- Select a group that you have added in Group Assignment and assign users to it.
- Click the three dots under the Action tab and select Edit.
- Switch to the Assignment tab and select a user.
- After assigning a user into a group it will automatically create the same user in Google Workspace.
Edit Users
- To update the user profile, Go to Users >> User List.
- Select a particular user and in Actions dropdown select Edit.
- Fill out user updated information and click on Save button.
- Once the user profile is updated in miniOrange, the changes will be automatically reflected in Google Workspace.
Delete Users
- To delete users, Go to Users >> User List.
- Select a particular user and in Actions dropdown select Delete.
- A pop up will appear when you click on the Yes button.
- Once the user is deleted in miniOrange, it will be automatically deleted from Google Workspace.
Password Sync
- On the miniOrange side, whenever a user resets their password (via reset password link or any other flow), the updated password is automatically synced to Google Workspace.
- Any password change performed within miniOrange is reflected in Google Workspace in real-time.
Create Group
- To create a group, Go to Groups >> Manage Groups.
- Click on Add Group
- Enter the group name and click on Create Group.
- Now go to Apps, select Google Provisioning App, and under Actions click Edit.
- Make sure you have enabled this Create Group Option
- Go to Group Assignments under that click on Assign Groups
- Assign groups that you want to provision to google workspace and click on Save.
- Now your group has been successfully provisioned to Google Workspace.
Delete Group
- Make sure that you have enabled Delete Groups options in Google Provisioning Apps
- Go to Groups >> Manage Groups
- Delete the group that you want to remove from Google Workspace.
- Now your group has been successfully deleted from Google Workspace.
View Provisioning Reports
How to access Provisioning Reports?
- Navigate to Reports in the left-hand navigation pane, search for Provisioning, and select Provisioning Report.
- Filter the reports by specifying Enduser Identifier and Application Name criteria. Additionally, choose the desired timespan for the reports. Once done, click on the Search.
- Alternatively, you can directly click on Search to retrieve all provisioning reports based on time without applying any specific filters.
External References
