- \n
- A JumpCloud administrator account<\/li>\n\n\n\n
- JumpCloud Device Package or higher<\/li>\n\n\n\n
- A Google Workspace sync authorized and active in JumpCloud<\/li>\n\n\n\n
- A Google user account with the following roles:\n
- \n
- Groups Admin (pre-built role)<\/li>\n\n\n\n
- User management Admin (pre-built role)<\/li>\n\n\n\n
- Custom role with \u2018Domain Management\u2019 admin API privileges<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- You have read through the considerations for Get Started: Google Workspace Integration<\/a><\/li>\n\n\n\n
- You have reviewed the attribute considerations and configured your desired user attributes per Configure the Google Workspace Integration<\/a><\/li>\n\n\n\n
- An alternative method has been setup for 2-Step Verification, like a phone number<\/li>\n<\/ul>\n\n\n\n
Considerations<\/strong><\/p>\n\n\n\n
- \n
- Inactive users in Google will not be created in JumpCloud<\/li>\n<\/ul>\n\n\n\n
Importing Google Workspace Users<\/strong><\/h2>\n\n\n\n
Importing users allows you to:<\/p>\n\n\n\n
- \n
- Conveniently create pre-existing Google accounts in JumpCloud, either manually or automatically <\/li>\n\n\n\n
- Continuously sync changes from Google Workspace to JumpCloud when user identities are being managed in Google<\/li>\n\n\n\n
- Import one-off changes made in Google Workspace directly when user identities are being managed in JumpCloud<\/li>\n<\/ul>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\")
<\/p><\/div>Tip:<\/strong> \nWhen selecting a manual import, the process will start immediately. If automatic imports are enabled, the initial import will start within the next hour and then run hourly afterwards.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To manually import users<\/strong><\/h3>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Navigate to DIRECTORY INTEGRATIONS<\/strong> > Cloud Directories<\/strong>.<\/li>\n\n\n\n
- Select the integration you authorized when completing the steps in Get Started: Google Workspace Integration<\/a>. <\/li>\n\n\n\n
- Navigate to the Details<\/strong> tab and scroll down to the Attribute mapping and settings<\/strong> section.<\/li>\n\n\n\n
- Confirm your attribute mapping and settings (per Configure the Google Workspace Integration<\/a>) to ensure you are importing and exporting the proper attributes.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nWhen users are imported from Google Workspace, JumpCloud populates the Username<\/strong> field with the username portion of the imported user’s email address as it’s configured in Google Workspace. For example, jo.lei@demoexample.com<\/strong> would have a username of jo.lei<\/strong> in JumpCloud. Users are created with only the attributes you want JumpCloud to control, which are those with import<\/strong> selected in the JumpCloud to import or export?<\/strong> column.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Scroll back up to the Import Users<\/strong> section and click Start Manual Import<\/strong>.<\/li>\n\n\n\n
- Select one of the following:\n
- \n
- New users and user updates<\/li>\n\n\n\n
- New users only<\/li>\n\n\n\n
- User updates only<\/li>\n\n\n\n
- Select specific new users to import.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Click Import<\/strong>.<\/li>\n\n\n\n
- You will receive an email with a link to the import results. If you imported fewer than 100 users, you will also see the results in the last step of the import flow.<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nUsers who were successfully imported have a green check mark. Users who weren\u2019t imported have a red exclamation mark, and the Import message explains why a user wasn\u2019t imported. When you close the import modal, you\u2019re returned to the Google Workspace Directory Details panel.<\/p>\n\n\n\n
You can see the state of new accounts in the Admin Portal Users list. The default user state for imported users will be either active or staged, depending on the Default User State for user Creation<\/strong> value set. See Manage User States<\/a> for more information. <\/p>\n\n\n\n
Imported users must have an active user state and a password set by either you or them before they will have access to their assigned resources. They will continue to have access to Google using their Google password until the activation process is complete for their JumpCloud account, and they are given access to Google Workspace from JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
<\/p><\/div>Tip:<\/strong> \nYou can also import users from the JumpCloud Admin Portal from User Management <\/strong>> Users<\/strong> by clicking ( +<\/strong> ), then selecting Google Workspace<\/strong>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To enable automatic imports and updates<\/strong><\/h3>\n\n\n\n
After doing your initial manual import, you can enable automatic (hourly) updates from Google. <\/p>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Navigate to DIRECTORY INTEGRATIONS<\/strong> > Cloud Directories<\/strong>.<\/li>\n\n\n\n
- Select the integration you authorized. <\/li>\n\n\n\n
- Navigate to Details<\/strong> > Import Users<\/strong> and toggle on Enable automatic imports of users and user updates from Google<\/strong><\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/Snag_9101f3b.png\")
<\/figure>\n\n\n\n- \n
- Optionally, select Receive summary email after each scheduled import<\/strong> to receive an email after each import is complete.<\/li>\n\n\n\n
- Click Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n
Associating JumpCloud users with Google Workspace<\/strong><\/h2>\n\n\n\n
After you authorize syncing for your Google Workspace directory, you can specify users and groups to manage from JumpCloud through the sync by associating them to that Google Workspace directory. Users can be given access to a Google Workspace directory either directly<\/a> or through a user group<\/a>.<\/p>\n\n\n\n
Prerequisites<\/strong><\/p>\n\n\n\n
- \n
- An authorized and activated Google Workspace directory.<\/li>\n\n\n\n
- Ensure that any users or groups, either preexisting or new, follow Google’s naming guidelines<\/a>.<\/li>\n<\/ul>\n\n\n\n
Considerations<\/strong><\/p>\n\n\n\n
- \n
- When you remove a user from a Google Workspace directory in JumpCloud, either directly or by removing them from all User Groups that disconnects them from the Google Workspace directory, the user is immediately suspended in Google Workspace and any existing Google sessions expire. After they\u2019re disconnected, the user is unable to log in to any Google Workspace resources that are connected to that directory.<\/li>\n\n\n\n
- Don\u2019t add a Google Workspace directory more than once in JumpCloud. If you authorize sync for the same Google Workspace directory more than once, users that are connected to multiple instances of the same Google Workspace directory in JumpCloud could be suspended if you remove them from one of the instances. You can avoid this by deactivating the sync for duplicate Google Workspace directories. <\/li>\n<\/ul>\n\n\n\n
To connect JumpCloud users to a Google Workspace directory<\/strong><\/h3>\n\n\n\n
From User Management > Users<\/strong><\/h4>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Navigate to USER MANAGEMENT<\/strong> > Users<\/strong>.<\/li>\n\n\n\n
- Select a user to view their details.<\/li>\n\n\n\n
- Select the Directories<\/strong> tab.<\/li>\n\n\n\n
- Select the Google Workspace directory to which you want to connect the user.<\/li>\n\n\n\n
- Click Save User<\/strong>. Synchronization will be initiated.
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/add-user-to-directory-3.png\")
<\/li>\n<\/ol>\n\n\n\nFrom User Management ><\/strong><\/strong> User Groups<\/strong><\/h4>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Navigate to USER MANAGEMENT<\/strong> > User Groups<\/strong>.<\/li>\n\n\n\n
- Select a user group to view their details.<\/li>\n\n\n\n
- Select the Directories<\/strong> tab<\/li>\n\n\n\n
- Select the Google Workspace directory to which you want users in the user group to be synced and have access.<\/li>\n\n\n\n
- Select the Users<\/strong> tab.<\/li>\n\n\n\n
- Check the box next to each user you want added to the group. <\/li>\n\n\n\n
- Click Save Group<\/strong>. Synchronization is initiated.
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/connect-user-group-users.jpeg\")
<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Tip:<\/strong> \nYou can also connect a user or user group from the Google Workspace directory sync configuration page. Navigate to Cloud Directories<\/strong>, select the Google Workspace Directory, select the Users <\/strong>or User<\/strong> Groups<\/strong> tab, then select the user(s) or user group(s) you want to give access to the Workspace directory and click save<\/strong>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Post connection behavior<\/strong><\/h3>\n\n\n\n
After you connect a user to a Google Workspace directory<\/strong><\/h4>\n\n\n\n
- \n
- If the user didn\u2019t previously exist in Google Workspace and the email sent as the PrimaryEmail matches a Google Workspace directory domain, a new, active user account is provisioned to Google Workspace <\/li>\n<\/ul>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
The Domains configuration for the integration will determine what happens If the user\u2019s company email domain does not match the Google Workspace directory domain or the list of configured domains. See Configuring Domain(s)<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- If the user resets their JumpCloud password, it’s synced to Google Workspace. When set, existing sessions to Google Workspace apps expire, and the user must log in again.<\/li>\n\n\n\n
- After you connect a user to a Google Workspace directory, the flow differs slightly for staged and active users:\n
- \n
- Staged user flow<\/strong>: A staged user is a user in a \u2018staged’ user state with a password status of either \u2018password pending’ or ‘active\u2019. \n
- \n
- Staged users who do not already exist in the Google Workspace directory will not have access to Google Workspace until you change their user state to active and a password is set in JumpCloud. They will not receive welcome or activation emails until they are in an ‘active\u2019 user state. <\/li>\n\n\n\n
- Staged users who already exist in the Google Workspace directory will remain active in that directory and will continue to have access. See Manage User States<\/a> for more information about user states. <\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Active user flow<\/strong>: An active user is a user in an ‘active’ user state, has a password, and that password status is set to ‘active’. After you add an active user to your Google Workspace directory in JumpCloud, the user receives an email that tells them which directory they\u2019ve been added to and to synchronize their password by logging in to their User Portal.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
After you connect a group to a Google Workspace Directory<\/strong><\/h4>\n\n\n\n
- Active user flow<\/strong>: An active user is a user in an ‘active’ user state, has a password, and that password status is set to ‘active’. After you add an active user to your Google Workspace directory in JumpCloud, the user receives an email that tells them which directory they\u2019ve been added to and to synchronize their password by logging in to their User Portal.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
- Staged user flow<\/strong>: A staged user is a user in a \u2018staged’ user state with a password status of either \u2018password pending’ or ‘active\u2019. \n
- Navigate to USER MANAGEMENT<\/strong> > User Groups<\/strong>.<\/li>\n\n\n\n
- Navigate to USER MANAGEMENT<\/strong> > Users<\/strong>.<\/li>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Click Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n
- Navigate to DIRECTORY INTEGRATIONS<\/strong> > Cloud Directories<\/strong>.<\/li>\n\n\n\n
- You will receive an email with a link to the import results. If you imported fewer than 100 users, you will also see the results in the last step of the import flow.<\/li>\n<\/ol>\n\n\n\n
- Select one of the following:\n
- Navigate to DIRECTORY INTEGRATIONS<\/strong> > Cloud Directories<\/strong>.<\/li>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- You have reviewed the attribute considerations and configured your desired user attributes per Configure the Google Workspace Integration<\/a><\/li>\n\n\n\n