Controls Google Workspace user synchronisation and sign-in for this tenant.

Creating OAuth 2.0 Credentials
  1. Open the Google Cloud Console — Credentials.
  2. Select or create a project.
  3. Click Create Credentials → OAuth client ID.
  4. Set the application type to Web application.
  5. Under Authorised redirect URIs, add: https://example.com/app/api/google/signin
  6. Click Create and copy the Client ID and Client Secret.
Settings
Client ID
The OAuth 2.0 client ID from Google Cloud Console.
Client Secret
The OAuth 2.0 client secret. Stored encrypted at rest.
Open Google Cloud Credentials
Sign-In Settings
Enabled
Activates Google Sign-In for this tenant.
Authorized Domains
Only users with email addresses from these Google Workspace domains are allowed to sign in. At least one domain is required. Example: example.com
Excluded Identities
Email addresses that should never be allowed to sign in via Google, even if their domain is authorised.
Import Settings

Automatic import synchronises Google Workspace users into the platform. Requires a service account with delegated admin access.

Import Enabled
Activates scheduled Google Workspace user synchronisation.
Service Account JSON
The full JSON content of a Google service account key file. To create one:
  1. In IAM → Service Accounts, create a service account.
  2. Grant it Domain-wide delegation.
  3. In the Workspace Admin Console (Security → API controls → Domain-wide delegation), add the service account client ID with the scope https://www.googleapis.com/auth/admin.directory.user.readonly.
  4. Download a JSON key and paste its contents here.
Stored encrypted at rest.
Delegated Admin Email
The email address of a Google Workspace admin user to impersonate when calling the Admin SDK.
Import Domains
Domains to import users from. Defaults to the Authorized Domains if not set separately.
Import Group Emails
Limit import to members of these Google Workspace groups (by group email address).
Import Customer ID
Your Google Workspace Customer ID (e.g. C0xxxxxxx ). Found in the Admin Console under Account settings.