1. Help Center
  2. IT Resources and Tech Setup

How to configure Google SSO and Sync

This guide outlines the steps to integrate Google SSO with the E3 Application and enable mapping of Groups and Schools through Google Contacts.

Useful Links
Google Cloud Console
● Google Admin Console

Step 1: Configure Google Cloud Console

GIF Tutorial - Step 1 

Hubspot.gif

Screenshot  Tutorial - Step 1
1. Log in to your Google Cloud Console account with your Admin Google Account.
2. In the top search bar, search for “API & Services”, then go to Credentials in the left
sidebar.
3. Click on + Create credentials and select Service account.
4. Fill the inputs:
  • Service account name: E3 App
  • “Service account ID” will be set automatically
  • “Service account description” is optional

5. Click Create and continue
6. In “Select a role”, search and select the Service Directory Viewer option
7. Click Continue.
8. Left Principals with access empty and click Done.
9. Locate and open our E3 App service account.
10. Then expand Advanced Settings.
11. Inside your service account, go to the "Keys" menu. Take note of the Unique ID on this page, you will copy and paste it in later steps. 

1-2

12. Create a new key as JSON. You will download it and store it locally.

Screenshot 2025-07-15 at 5.09.11 AM

Screenshot 2025-07-15 at 5.10.59 AM


Step 2: Configure Google Admin Console

GIF Tutorial - Step 2

Screenshot  Tutorial - Step 2

1. Log in to your Google Admin Console.
2. Navigate to:
Security > Access and data control > API controls

Screenshot 2025-07-15 at 5.36.14 AM

3. On the API controls page, click on “Manage domain-wide delegation”.
4. Click the “Add new” button.

Screenshot 2025-07-15 at 5.37.30 AM

5. Paste the Client ID (Unique ID) copied from the Cloud Console into the Client ID field.

00

6. In the OAuth Scopes (comma-delimited) field, enter the following scopes:
- https://www.googleapis.com/auth/admin.directory.group.readonly
- https://www.googleapis.com/auth/admin.directory.group.member.readonly
- https://www.googleapis.com/auth/admin.directory.user.readonly

000


Step 3: Enable Admin SDK API

  1. Go to https://console.cloud.google.com/
  2. Select your project
  3. Go to Api & Services

Screenshot 2025-07-30 at 11.54.37 PM

4. Click in Enable APIs and Services

Screenshot 2025-07-30 at 11.55.55 PM 

5. Search for Admin SDK API

Screenshot 2025-07-30 at 11.57.20 PM

6. Click in Enable

Screenshot 2025-07-30 at 11.59.31 PM


Step 4: Configure your E3 Account

1. Log in to your E3 account
2. Go to Accounts and select your account
3. Inside your account, click Edit, then go to the Integrations tab
4. Select the Google Integration card > Google Sync
5. Fill in the fields with the data from the JSON file you downloaded in Step 1
6. In the Admin Email field, enter your Google Admin account email address.

Screenshot 2025-07-15 at 6.25.50 AM

7. Map the Google groups to your E3 groups. (Each E3 group must have a default role.)

Screenshot 2025-07-15 at 6.26.40 AM

Active users will sync at midnight to their associated group(s).
Users that are manually added to groups will maintain those changes, the sync will not override manual additions/invitations.

Deactivated users will be removed from
ALL groups, including manually added groups.

 


Need more help?

💬 Chat with us.

Click the blue icon on the bottom-right corner of this page to send us a chat.

✉️ Email us.

You can also send us an email at help@emergent3.com.