There are two ways you can connect Google Workspace to ºÚÁϺ£½Ç91Èë¿Ú; our Google Workspace Integration or our Google Workspace SSO Connector.
Read this article to learn more about the benefits and use cases for each and how they can be used together.
Key Differences
The following are key differences between integrating Google Workspace and implementing Google Workspace SSO:
Google Workspace Integration
- Is an OAuth2-based integration.
- Gives you the option to manage users from ºÚÁϺ£½Ç91Èë¿Ú. You can provision users, manage their attributes, and suspend them in ºÚÁϺ£½Ç91Èë¿Ú or Google.
- Allows users to log into Google Workspace directly.
- Requires you to configure Multi-factor Authentication (MFA) in Google.
- Once users login through the ºÚÁϺ£½Ç91Èë¿Ú User Portal, ºÚÁϺ£½Ç91Èë¿Ú is established as the password authority; whenever the user password or attributes change in ºÚÁϺ£½Ç91Èë¿Ú, ºÚÁϺ£½Ç91Èë¿Ú then updates Google Workspace.
Google Workspace SSO
- Is a SAML 2.0-based integration.
- Requires users to be managed in ºÚÁϺ£½Ç91Èë¿Ú. Every Google Workspace user must also be a ºÚÁϺ£½Ç91Èë¿Ú user to log in to Google Workspace.
- Directs users to log in to Google from the ºÚÁϺ£½Ç91Èë¿Ú User Portal. Even if they attempt to log in to Google directly, they will be redirected to sso.jumpcloud.com.
- Requires you to configure MFA in ºÚÁϺ£½Ç91Èë¿Ú.
- Users are always forced to authenticate against ºÚÁϺ£½Ç91Èë¿Ú.
​â¶Ä‹â¶Ä‹â¶Ä‹About Our Google Workspace Integration
ºÚÁϺ£½Ç91Èë¿Ú’s Google Workspace Integration uses OAuth to create a secure, persistent connection between Google Workspace and ºÚÁϺ£½Ç91Èë¿Ú. ºÚÁϺ£½Ç91Èë¿Ú becomes the authoritative source of identity, which lets you:
- Import existing Google Workspace users.
- Export new ºÚÁϺ£½Ç91Èë¿Ú users to Google Workspace.
- Sync user attributes and passwords between ºÚÁϺ£½Ç91Èë¿Ú and Google Workspace.
- Centralize user provisioning and deprovisioning.
- Give users one set of credentials to access ºÚÁϺ£½Ç91Èë¿Ú, Google Workspace, and other resources you’ve integrated with ºÚÁϺ£½Ç91Èë¿Ú, like systems, RADIUS, and LDAP.
We recommend our Google Workspace Integration if you want to centralize user identity and lifecycle management in ºÚÁϺ£½Ç91Èë¿Ú while still having the flexibility of creating users in either ºÚÁϺ£½Ç91Èë¿Ú or Google Workspace. You can provision, update, and deprovision users in Google Workspace from ºÚÁϺ£½Ç91Èë¿Ú. You can also provision users in Google Workspace and import them into ºÚÁϺ£½Ç91Èë¿Ú. Accounts and user profiles remain in sync. Users only need to remember one password to access all their ºÚÁϺ£½Ç91Èë¿Ú and Google resources.
About Our Google Workspace SSO Connector
The Google Workspace SSO Connector uses the Security Assertion Markup Language (SAML 2.0) to authenticate ºÚÁϺ£½Ç91Èë¿Ú users to Google Workspace. Connect the Google Workspace SSO connector to ºÚÁϺ£½Ç91Èë¿Ú to:
- Manage user access to Google Workspace.
- You can authorize user access to Google Workspace, and you can suspend or delete user access to Google Workspace.
- Learn more about authorizing user access to SAML applications.
- Learn more about suspending a user account or deleting a user account.
- You can’t import or export user accounts with our SAML connectors.
- You can authorize user access to Google Workspace, and you can suspend or delete user access to Google Workspace.
- Map user attributes between ºÚÁϺ£½Ç91Èë¿Ú and Google Workspace so that you can customize user permissions and roles.
- Give users one set of credentials to access ºÚÁϺ£½Ç91Èë¿Ú, Google Workspace, and other resources you’ve integrated with ºÚÁϺ£½Ç91Èë¿Ú, like systems, RADIUS, and LDAP.
We recommend our Google Workspace SSO connector for controlling access to Google Workspace from ºÚÁϺ£½Ç91Èë¿Ú. This allows you to centralize access management from ºÚÁϺ£½Ç91Èë¿Ú. Users benefit by having a consistent experience for accessing all ºÚÁϺ£½Ç91Èë¿Ú managed resources and all Google resources.
Benefits of Using Both
We recommend our Google Workspace Integration if you want to centralize user identity and lifecycle management in ºÚÁϺ£½Ç91Èë¿Ú while still having the flexibility of creating users in either ºÚÁϺ£½Ç91Èë¿Ú or Google Workspace. You can provision, update, and deprovision users in Google Workspace from ºÚÁϺ£½Ç91Èë¿Ú. You can also provision users in Google Workspace and import them into ºÚÁϺ£½Ç91Èë¿Ú. Accounts and user profiles remain in sync. Users only need to remember one password to access all their ºÚÁϺ£½Ç91Èë¿Ú and Google resources.