How to configure Google SSO and Sync

This guide outlines the steps to integrate Google SSO with the E3 Application and enable mapping of Groups and Schools through Google Contacts.

Useful Links
● Google Cloud Console
● Google Admin Console

Step 1: Configure Google Cloud Console

GIF Tutorial - Step 1 

Screenshot  Tutorial - Step 1
1. Log in to your Google Cloud Console account with your Admin Google Account.
2. In the top search bar, search for “API & Services”, then go to Credentials in the left
sidebar.
3. Click on + Create credentials and select Service account.
4. Fill the inputs:

• Service account name: E3 App
• “Service account ID” will be set automatically
• “Service account description” is optional

5. Click Create and continue
6. In “Select a role”, search and select the Service Directory Viewer option
7. Click Continue.
8. Left Principals with access empty and click Done.
9. Locate and open our E3 App service account.
10. Then expand Advanced Settings.
11. Inside your service account, go to the "Keys" menu.

12. Create a new key as JSON

---

Step 2: Configure Google Admin Console

GIF Tutorial - Step 2

Screenshot  Tutorial - Step 2

1. Log in to your Google Admin Console.
2. Navigate to:
Security > Access and data control > API controls

3. On the API controls page, click on “Manage domain-wide delegation”.
4. Click the “Add new” button.

5. Paste the Client ID copied from the Cloud Console into the Client ID field.

6. In the OAuth Scopes (comma-delimited) field, enter the following scopes:
- https://www.googleapis.com/auth/admin.directory.group.readonly
- https://www.googleapis.com/auth/admin.directory.group.member.readonly
- https://www.googleapis.com/auth/admin.directory.user.readonly

---

Step 3: Configure your E3 Account

1. Log in to your E3 account
2. Go to Accounts and select your account
3. Inside your account, click Edit, then go to the Integrations tab
4. Select the Google Integration card > Google Sync
5. Fill in the fields with the data from the JSON file you downloaded in Step 1
6. In the Admin Email field, enter your Google Admin account email address.

7. Map the Google groups to your E3 groups. (Each E3 group must have a default role.)

Active users will sync at midnight to their associated group(s).
Users that are manually added to groups will maintain those changes, the sync will not override manual additions/invitations.

Deactivated users will be removed from ALL groups, including manually added groups.

---

Step 4: Enable Admin SDK API

1. Go to https://console.cloud.google.com/
2. Select your project
3. Go to Api & Services

4. Click in Enable APIs and Services

 

5. Search for Admin SDK API

6. Click in Enable

---

Need more help?

💬 Chat with us.

Click the blue icon on the bottom-right corner of this page to send us a chat.

✉️ Email us.

You can also send us an email at help@emergent3.com.