All Categories
Directory Environments
Sync with Google Workspace

Sync with Google Workspace

Last updated on July 23, 2025

Evo Security syncs with Google Workspace service. Your users will be able to login using Evo, with their network credentials. The user will be required to enter a code based on multi-factor authentication (MFA) being enabled, and their credentials are authenticated by your network.

Requirements

These instructions assume:

  • Organization configured for Google Workspace.
  • All users have been created under Google Workspace.
  • All users have a unique email address, specific to their user.
  • All users are a member of a group to be synced.
  • The user(s) in question exist locally on the workstation.

Google Workspace configuration

  1. Go to https://console.cloud.google.com/
  1. Create a new project under your domain.
      2. Notion image
  1. After creating the project, Navigate to API & Services.
      2. Notion image
  1. From the left-side navigation, click Library.
      2. Notion image
  1. Search for the "Admin SDK API".
      2. Notion image
  1. Enable the Admin SDK API if it is not already enabled, and head back to dashboard.
      2. Notion image
  1. Before we continue, we also need to create an OAuth Consent screen for the new Google Workspace Project.
  1. While in the project, click OAuth Consent Screen. If nothing is configured you will hit “Get Started”
      2. Notion image
  1. You’ll then start to fill in “App Information” and hit next where you will Select Internal and Create.
      2. Notion image
  1. Save and continue.
  1. Next, we will set the following Scopes. Refer to Screenshot for the scope information that should be set. All of these are found within the same Add or Remove Scopes screen.
      • Non-Sensitive Scopes:
        • .../auth/userinfo.email
        • .../auth/userinfo.profile
        • openid
      • Sensitive Scopes:
        • .../auth/admin.directory.user.readonly
        • .../auth/admin.directory.user.alias.readonly
        • .../auth/admin.directory.group.readonly
      Notion image
  1. Once this is done, let's head back to the credentials and create a new OAuth 2.0 Client.
  1. Under Clients Click Create Clients and create a new OAuth 2.0 Client ID.
  1. Select Web Application.
  1. Name the app what you would like, then add the following Authorized JavaScript origins and Authorized redirect URIs:
      2.  
      • For Authorized JavaScript origins add:
        • https://your-environment-url.evosecurity.com
      • For Authorized redirect URIs add:
        • https://your-environment-url.evosecurity.com
        • https://your-environment-url.evosecurity.com/oauth2callback
      Notion image
  1. Click Create.
  1. Once that's done, you'll get your Client ID and Client Secret.
  1. In another tab, login to your Evo Portal.
  1. From the left nav menu, select your desired Tenant and then locate Directories within that tenant.
  1. Select Directories.
  1. Click "New+" on the top right and select the Google Workspace option.
  1. Enter a directory name.
  1. Download the JSON and you will copy/paste the content from that JSON into your Evo Security admin portal under the Paste JSON Client Secret.
      2. Notion image
  1. Once entered, click "Get OAUTH Code" and you'll be redirected to sign into your Google Workspace account.
  1. Sign in, accept the integrations, and you'll be given the OAuth Code.
  1. Paste that into the OAuth field and create your Google Workspace Directory!
Notion image

Now that you’ve completed the configuration for Google Workspace, your users will be able to authenticate with Evo.

If you’ve experienced any issues with the configuration, please contact us and we’re happy to help.

Did this answer your question?
😞
😐
🤩
What is Evo Cloud? Evo's Directory as a Service (DaaS) - How to get Started Unsupported - Microsoft Azure Virtual Desktop