{"id":90086,"date":"2023-06-08T13:29:48","date_gmt":"2023-06-08T17:29:48","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=90086"},"modified":"2024-09-27T12:42:49","modified_gmt":"2024-09-27T16:42:49","slug":"troubleshoot-google-workspace-integration","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/troubleshoot-google-workspace-integration","title":{"rendered":"Troubleshoot: Google Workspace Integration"},"content":{"rendered":"\n
Cause: The users do not have a secondary\/additional form of MFA.<\/p>\n\n\n\n
Resolution: Ensure users have a secondary\/additional form of MFA, like Authenticator (TOTP) <\/em>or 2-Step Phone verification phone.<\/em><\/p>\n<\/div><\/div><\/div>\n\n\n\n Cause: When users are removed and the directory is added in the same save action, the group members are synced in the group’s original state and then the removed users are updated to indicate they no longer have access. <\/p>\n\n\n\n Resolution: The change in membership and then adding the directory must be completed in two separate steps. Remove the user(s) and save the group. Then, add the directory and save the group again.<\/p>\n<\/div><\/div><\/div>\n\n\n\n When using the Google Apps User Provisioning and Sync utility, administrators occasionally receive a 500 Error during the import process. This occurs after an admin has successfully established an OAuth connection and attempts to import users.<\/p>\n\n\n\n Cause:<\/p>\n\n\n\n The most prevalent cause of this is the Google Apps account itself not having API Access enabled under admin.google.com<\/a> > Security > API Reference > API access<\/strong>.<\/p>\n\n\n\n Resolution:<\/p>\n\n\n\n We recommend that you enable the API access setting and re-attempt to import users. <\/p>\n<\/div><\/div><\/div>\n\n\n\n Cause: Resolution: If the above resolutions don’t solve the issue, contact your JumpCloud administrator to verify your account status and assist in troubleshooting. If signing up for service, please submit a support request<\/a> and confirm the email address being used in the form.<\/p>\n\n\n\n Alternate Resolution:<\/p>\n\n\n\n Add JumpCloud as a Trusted Third-Party application.<\/p>\n<\/div><\/div><\/div>\n\n\n\n When a new user is created in JumpCloud, their account is not synchronized to and does not appear in Google Workspace list of users. Existing users will synchronize without issue.<\/p>\n\n\n\n Cause:<\/p>\n\n\n\n The Google Workspace instance has run out of available license seats.<\/p>\n\n\n\n Resolution:<\/p>\n\n\n\n Increase the number of seats in your Google Workspace instance.<\/a><\/p>\n<\/div><\/div><\/div>\n\n\n\n When you attempt to authorize the Google Workspace Directory integration using a Super Administrator account, you can receive an \u201cError 400: admin_policy_enforced\u201d error message.<\/p>\n\n\n\n There are three common causes for the “Error 400: admin_policy_enforced” message:<\/p>\n\n\n\n Cause 1:<\/p>\n\n\n\n API Access is Restricted. <\/p>\n\n\n\n To fix this and Enable API Access: <\/strong><\/p>\n\n\n\n Cause 2:<\/p>\n\n\n\n One of the systems is disabled.<\/p>\n\n\n\n To fix this and enable systems: <\/strong> <\/p>\n\n\n\n Cause 3:<\/p>\n\n\n\n URL Blocking is blocking necessary URLs like the GAM client_id.<\/p>\n\n\n\n To fix this and unblock necessary URLs<\/strong>: <\/p>\n\n\n\n Cause: LastName is missing.<\/p>\n\n\n\n Resolution: Verify the user has a valid Last Name.<\/p>\n<\/div><\/div><\/div>\n\n\n\n Ensure that Enable management of groups and memberships in Google Workspace<\/strong> is enabled. Once it is enabled, click Save<\/strong>. You should see the Distribution Group Email column.<\/p>\n<\/div><\/div><\/div>\n\n\n\n\n
The username and\/or password doesn’t comply with Google’s name and password guidelines. <\/p>\n\n\n\n
Make sure the Gmail username and password comply with Google’s guidelines<\/a>.<\/p>\n\n\n\n\n
\n
\n