Google Workspace


Identity Governance


This provider requires a Service Account:

  1. Go to Google Cloud and then select a project
    1. Create a service account
    2. Click on Keys tab and then the button Add Key with the JSON format
    3. Store the JSON file in a secure location such as a password manager
    4. Advanced settings -> Enable the Google Workspace Domain-wide Delegation
  2. Go to Google Cloud APIs & Services
    1. Enable the Admin SDK API
Service Account - Client EmailThis value is available in the JSON file for the client_email property e.g.,
Service Account - Private KeyThis value is available in the JSON file for the private_key property e.g., -----BEGIN PRIVATE KEY-----\nMIIEvQ...MKgrU=\n-----END PRIVATE KEY-----\n


User Email (administrator)This value must be a Google Workspace administrator email address.
Customer IDGoogle Workspace Admin -> Account -> Account settings