Integrate Google Workspace

Integrate Google Workspace

Integrating Google Workspace with C2 Identity offers you a secure and efficient way to manage Google Workspace users. The integration supports the following services:

  • Single sign-on (SSO): allows users to sign in to Google Workspace and other C2 Identity-integrated apps without having to enter their credentials again.
  • User provisioning: matches and links C2 Identity and Google Workspace users.

For more information about SSO and user provisioning, refer to Integrate applications with C2 Identity.

Before you start

  • Check if your Google Workspace is a paid subscription. Free editions cannot be integrated with C2 Identity via SAML SSO.
  • Get a super admin account for configurations on Google Workspace.

Set up SSO for Google Workspace

Configure C2 Identity as the identity provider (IdP)

  1. In the C2 Identity admin portal, go to the Application page.
  2. Click Add > Google Workspace. A confirmation dialog will pop up.
  3. Sign in using your Google Workspace's admin account.
  4. Click Allow to grant C2 Identity to access your Google Account.
  5. Enter a display name for your Google Workspace in Application name.
  6. (Optional) Enable User provisioning. This option lets you automatically provision C2 Identity users to your Google Workspace in the future.1
  7. Save the settings to complete the IdP setup. The page Configure service provider will be displayed. Follow the steps in the next section to proceed with the SP setup.

Configure Google Workspace as the service provider (SP)

  1. Open a new tab in the web browser. Sign in to Google Workspace with an admin account.
  2. Go to Security > Authentication > SSO with third party IdP.
  3. Click Add SAML profile and enter the following information:
    • IdP entity ID
    • Sign-in page URL
    • Sign-out page URL
    • Change password URL
  4. Upload the certificate you get from C2 Identity's Configure service provider2 page, and save your profile.
  5. Copy the following information, which will be used in the next section:
    • Entity ID (SP entity ID)
    • ACS URL (Single sign-on URL)
  6. In the Manage SSO profile assignments section, select the SSO profile you just created.
  7. (Optional) If you're using a customized domain in Google Workspace, go to the Domain-specific service URLs section. Under Automatically redirect users to the third-party IdP in the following SSO profile, select your new SSO profile.

Configure Google information in C2 Identity

  1. Go back to the C2 Identity admin portal > Application > your Google Workspace profile > Details.
  2. Enter the information you copied in the previous section and save the settings.
  3. Click Apply. Your Google Workspace is now integrated with C2 Identity. Refer to Assign applications to users and groups to grant users access to Google Workspace via SSO and conduct provisioning.

Notes:

  1. Each Google Workspace user requires a first name and a last name. If a C2 Identity user lacks any of these attributes, the attribute will be replaced with the user's username after provisioning users to Google Workspace. Here are some examples:
    C2 Identity User Provisioned User on Google Workspace
    Username First Name Last Name First Name Last Name
    suzi123 suzi kim suzi kim
    suzi123 - - suzi123 suzi123
  2. If you accidentally close the Configure service provider page during setup, you can still access it at Application > your Google Workspace profile > Configure SP.
Before you start
Set up SSO for Google Workspace
Configure C2 Identity as the identity provider (IdP)
Configure Google Workspace as the service provider (SP)
Configure Google information in C2 Identity