Skip to content

Commit 6da9b0d

Browse files
authored
Merge pull request #92451 from v-sonan/user/v-sonan/gsuite-update
User/v sonan/gsuite update
2 parents 04e7087 + 33ce3f4 commit 6da9b0d

File tree

1 file changed

+4
-10
lines changed

1 file changed

+4
-10
lines changed

articles/active-directory/saas-apps/google-apps-provisioning-tutorial.md

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ The objective of this tutorial is to demonstrate the steps to be performed in G
2828
> [!NOTE]
2929
> The G Suite connector was recently updated on October 2019. Changes made to the G Suite connector include:
3030
- Added support for additional G Suite user and group attributes.
31-
- Updated G Suite target attribute names to match what is defined [here](/azure/active-directory/manage-apps/customize-application-attributes).
31+
- Updated G Suite target attribute names to match what is defined [here](https://developers.google.com/admin-sdk/directory).
3232
- Updated default attribute mappings.
3333

3434
## Prerequisites
@@ -125,6 +125,9 @@ This section guides you through the steps to configure the Azure AD provisioning
125125
> [!TIP]
126126
> You may also choose to enable SAML-based single sign-on for G Suite , following the instructions provided in the [G Suite Single sign-on tutorial](https://docs.microsoft.com/azure/active-directory/saas-apps/google-apps-tutorial). Single sign-on can be configured independently of automatic user provisioning, though these two features compliment each other.
127127
128+
> [!NOTE]
129+
> To learn more about G Suite's Directory API endpoint, refer to [Directory API](https://developers.google.com/admin-sdk/directory).
130+
128131
### To configure automatic user provisioning for G Suite in Azure AD:
129132

130133
1. Sign in to the [Azure portal](https://portal.azure.com). Select **Enterprise Applications**, then select **All applications**.
@@ -193,15 +196,6 @@ This operation starts the initial synchronization of all users and/or groups def
193196

194197
For more information on how to read the Azure AD provisioning logs, see [Reporting on automatic user account provisioning](../manage-apps/check-status-user-account-provisioning.md).
195198

196-
> [!NOTE]
197-
> Another viable option for automating user provisioning to G Suite is to use [Google Cloud Directory Sync](https://support.google.com/a/answer/106368?hl=en). This option provisions your on-premises Active Directory identities to G Suite.
198-
199-
## Common issues
200-
* G Suite requires that all provisioned users are from verified domains. Ensure that any user that you would like to provision has a UPN from a verified domain in G Suite. If a user from an un verified domain is in scope for provisioning, you will see an error in the [provisioning logs](https://docs.microsoft.com/azure/active-directory/reports-monitoring/concept-provisioning-logs) such as "GoogleAppsInvalidDomain". You can prevent these errors and ensure that users from unverified domains are out of scope by using a [scoping filter](https://docs.microsoft.com/azure/active-directory/manage-apps/define-conditional-rules-for-provisioning-user-accounts).
201-
* Target attribute: userPrincipalName
202-
* Operator: REGEX MATCH or NOT REGEX MATCH
203-
* Value: .*@domain.com
204-
205199
## Additional resources
206200

207201
* [Managing user account provisioning for Enterprise Apps](../manage-apps/configure-automatic-user-provisioning-portal.md)

0 commit comments

Comments
 (0)