You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/saas-apps/google-apps-provisioning-tutorial.md
+4-10Lines changed: 4 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,7 +28,7 @@ The objective of this tutorial is to demonstrate the steps to be performed in G
28
28
> [!NOTE]
29
29
> The G Suite connector was recently updated on October 2019. Changes made to the G Suite connector include:
30
30
- Added support for additional G Suite user and group attributes.
31
-
- Updated G Suite target attribute names to match what is defined [here](/azure/active-directory/manage-apps/customize-application-attributes).
31
+
- Updated G Suite target attribute names to match what is defined [here](https://developers.google.com/admin-sdk/directory).
32
32
- Updated default attribute mappings.
33
33
34
34
## Prerequisites
@@ -125,6 +125,9 @@ This section guides you through the steps to configure the Azure AD provisioning
125
125
> [!TIP]
126
126
> You may also choose to enable SAML-based single sign-on for G Suite , following the instructions provided in the [G Suite Single sign-on tutorial](https://docs.microsoft.com/azure/active-directory/saas-apps/google-apps-tutorial). Single sign-on can be configured independently of automatic user provisioning, though these two features compliment each other.
127
127
128
+
> [!NOTE]
129
+
> To learn more about G Suite's Directory API endpoint, refer to [Directory API](https://developers.google.com/admin-sdk/directory).
130
+
128
131
### To configure automatic user provisioning for G Suite in Azure AD:
129
132
130
133
1. Sign in to the [Azure portal](https://portal.azure.com). Select **Enterprise Applications**, then select **All applications**.
@@ -193,15 +196,6 @@ This operation starts the initial synchronization of all users and/or groups def
193
196
194
197
For more information on how to read the Azure AD provisioning logs, see [Reporting on automatic user account provisioning](../manage-apps/check-status-user-account-provisioning.md).
195
198
196
-
> [!NOTE]
197
-
> Another viable option for automating user provisioning to G Suite is to use [Google Cloud Directory Sync](https://support.google.com/a/answer/106368?hl=en). This option provisions your on-premises Active Directory identities to G Suite.
198
-
199
-
## Common issues
200
-
* G Suite requires that all provisioned users are from verified domains. Ensure that any user that you would like to provision has a UPN from a verified domain in G Suite. If a user from an un verified domain is in scope for provisioning, you will see an error in the [provisioning logs](https://docs.microsoft.com/azure/active-directory/reports-monitoring/concept-provisioning-logs) such as "GoogleAppsInvalidDomain". You can prevent these errors and ensure that users from unverified domains are out of scope by using a [scoping filter](https://docs.microsoft.com/azure/active-directory/manage-apps/define-conditional-rules-for-provisioning-user-accounts).
201
-
* Target attribute: userPrincipalName
202
-
* Operator: REGEX MATCH or NOT REGEX MATCH
203
-
* Value: .*@domain.com
204
-
205
199
## Additional resources
206
200
207
201
*[Managing user account provisioning for Enterprise Apps](../manage-apps/configure-automatic-user-provisioning-portal.md)
0 commit comments