This article provides step-by-step instructions for configuring the Google Workspace Identity Management integration for individual clients within Auvik SaaS Management. Once connected, the platform will automatically import users and ingest application event data enabling deeper visibility into user activity and SaaS application usage across the organization.
Why Integrate with Google Workspace?
Integrating Google Workspace with Auvik SaaS Management streamlines identity management and enhances visibility into SaaS usage across your organization. Key benefits of the integration include:
- Simplified User Management: Automatically sync users from Google Workspace, reducing manual administrative tasks and ensuring user data stays up to date.
- Improved Application and Event Association: The integration enables more accurate identification and correlation of SaaS applications and events to users based on their Google Workspace profiles.
- Group and Department Level Reporting: Leverage Google Workspace group and department metadata to generate targeted reports, making it easier to analyze access patterns and manage user segments.
Richer SaaS Visibility: Ingest application activity and security events tied to Google Workspace single sign-on (SSO), enabling deeper insight into your SaaS environment and enhanced security posture through comprehensive SSO and MFA coverage reporting.
Prerequisites
Before installing the Google Workspace integration, ensure that you have:
- Required Auvik SaaS permissions to install integrations
- From the Partner Hub: Default Admin
- From the Client Hub: Client Admin
- A valid Google Workspace tenant account with admin privileges
Before configuring the integration, ensure you have clarity on which users and groups you intend to manage with Auvik SaaS Management. The platform allows you to exclude specific groups, preventing those users from being imported or billed.
Note: Guest users are automatically excluded by default.
Configuration & Setup
The Google Workspace integration can be configured using SSO.
- Navigate to the Google Workspace Identity Management Integration
- From the Partner Hub > Org Preferences > Integrations > Clients Tab
- From the Partner Hub > Clients > Action > Add Integration
- From the Admin Hub > Utilities > Identity Management Integration
- Select Configure
- A pop-up window will appear, prompting you to sign in with your Google credentials and grant the required permissions
- Input the desired Client Name
- Once the client tenant has been successfully created, you can choose to import all groups or selectively exclude specific groups from the import process. Please note that any user imported through this process will be included in your billable usage. Guest accounts are automatically excluded.
Upon successful configuration of the integration, a confirmation notification will appear in the bottom-right corner of the screen. A new section will appear within the client’s Tenant Identities and Assets area, allowing you to review Google Workspace users and groups. Please note that user and application event data may take up to 24 hours to populate within the platform.
Editing Google Workspace Identity Management Users and Groups
Importing a User
From the Google Workspace Users page within Identities and Assets, you can review all imported users that are currently enabled for data collection.
- Important: If a user is a member of an excluded group, they will not be eligible for data collection
- To import a user for data collection, select Import User from the Actions menu
- Once usage has been detected, the user will appear within the Users page under Identities and Assets
Disabling a User
From the Users page within Identities and Assets, you can review all Auvik SaaS users that are currently, or have previously been, enabled for data collection. Users can be disabled manually, or automatically if they belong to an Identity Management exclusion group.
To disable a user from data collection, select Disable User from the Actions menu.
- You may need to enable the Expired Users filter in the table to locate the user
- Expired users are those from whom no activity has been detected in the last 30 days. These users are automatically removed from billing
Excluding a Group
After the initial integration setup, you can further refine which groups are included for data collection by navigating to the Google Workspace Groups page within Identities and Assets.
- At this time, groups cannot be reintroduced once excluded
- To review which users are associated with a group, select View Users from the Actions menu
- To exclude a group select ‘Exclude Group’ from the Action menu
Leveraging Google Workspace Groups for Reporting
To segment reports based on Google Workspace groups, you must first import the desired group for reporting from the Google Workspace Groups page.
- Select Import for Reporting from the Actions menu
- Navigate to the desired report and, where available, use the Select Certain Group option to filter by the imported group