Google Workspace
This guide will show you how to integrate GoodAccess with Google Workspace SSO.
Last updated
Was this helpful?
This guide will show you how to integrate GoodAccess with Google Workspace SSO.
Last updated
Was this helpful?
Remember to to GoodAccess. Users without them won't be able to log in.
Click + Add provider, enter the Provider name, choose your Identity Provider, and click Continue.
Log in to the , and go to .
Click Add App, and Add custom SAML app.
Give the appplication a name, upload a logo, and click Continue.
Copy the details to GoodAccess - (3) Identity Provider links, and click Continue.
Sign in URL - SSO URL
Entity ID - Entity ID
X509 signing certificate - Certificate
Copy the details from GoodAccess - (2) GoodAccess links, and click Continue.
ACS URL - Assertion Consumer Service URL
Entity ID - Entity ID
Start URL - Login URL
Name ID format - UNSPECIFIED
Name ID - Basic Information > Primary email
Click ADD MAPPING, and add two attributes as follows:
Primary email
"email" (without quotes)
First name
"name" (without quotes)
Click Finish to confirm your settings.
You have now successfully set up your Google Workspace SSO with GoodAccess.
Since SCIM for Google Workspace is not currently supported for public use, it's necessary to use a combination of Google Apps Script and GoodAccess API Integration for complete user management.
Members
Create
Update
Remove
Copy the following code snippet and paste it into the code editor in Google Apps Script:
For the code to function correctly, you need to replace the following values in the code:
<DOMAIN_NAME>
- The verified domain of your organization in Google Workspace (e.g. goodaccess.com)
<PROVIDER_ID>
- The Provider ID you obtained in the final step of the GoodAccess SSO configuration form
<INTEGRATION_TOKEN>
- The Token you obtained when creating the API Integration
Click + to add a service, and add Admin SDK API.
In the left menu, go to Triggers, and click + Add Trigger.
Choose which function to run - syncUsers()
Choose which doployment should run - Head
Select event source - Time-driven
Select type of time based trigger - Hour timer
Select hour interval - Every hour
Click Save.
You have now successfully set up Google Workspace SCIM with GoodAccess.
In the application click User access.
Choose who should have access, select ON, and click Save.
The user provisioning time period depends on the settings (default is 1 hour).
Create a new with the scopes specified below, and securely save the Token for the next step.
Go to , and click New Project.