How to configure Google SSO and Sync

This guide outlines the steps to integrate Google SSO with the E3 Application and enable mapping of Groups and Schools through Google Contacts.

Useful Links
● Google Cloud Console
● Google Admin Console

Step 1: Configure Google Cloud Console

GIF Tutorial - Step 1

Screenshot Tutorial - Step 1
1. Log in to your Google Cloud Console account with your Admin Google Account.
2. In the top search bar, search for “API & Services”, then go to Credentials in the left
sidebar.
3. Click on + Create credentials and select Service account.
4. Fill the inputs:

Service account name: E3 App
“Service account ID” will be set automatically
“Service account description” is optional

5. Click Create and continue
6. In “Select a role”, search and select the Service Directory Viewer option
7. Click Continue.
8. Left Principals with access empty and click Done.
9. Locate and open our E3 App service account.
10. Then expand Advanced Settings.
11. Inside your service account, go to the "Keys" menu.

Screenshot 2025-07-15 at 5.07.39 AM

12. Create a new key as JSON

Step 2: Configure Google Admin Console

GIF Tutorial - Step 2

Screenshot Tutorial - Step 2

1. Log in to your Google Admin Console.
2. Navigate to:
Security > Access and data control > API controls

3. On the API controls page, click on “Manage domain-wide delegation”.
4. Click the “Add new” button.

Screenshot 2025-07-15 at 5.37.30 AM

5. Paste the Client ID copied from the Cloud Console into the Client ID field.

Screenshot 2025-07-15 at 5.39.36 AM

6. In the OAuth Scopes (comma-delimited) field, enter the following scopes:
- https://www.googleapis.com/auth/admin.directory.group.readonly
- https://www.googleapis.com/auth/admin.directory.group.member.readonly
- https://www.googleapis.com/auth/admin.directory.user.readonly

Screenshot 2025-07-15 at 5.40.39 AM

Step 3: Configure your E3 Account

1. Log in to your E3 account
2. Go to Accounts and select your account
3. Inside your account, click Edit, then go to the Integrations tab
4. Select the Google Integration card > Google Sync
5. Fill in the fields with the data from the JSON file you downloaded in Step 1
6. In the Admin Email field, enter your Google Admin account email address.

Screenshot 2025-07-15 at 6.25.50 AM