---
title: Google Workspace IDP
description: ''
slug: /help/docs/platform-services/automation-service/app-central/integrations/google-workspace-idp/
canonical: https://www.sumologic.com/help/docs/platform-services/automation-service/app-central/integrations/google-workspace-idp/
---
import useBaseUrl from '@docusaurus/useBaseUrl';
})
***Version: 1.1
Updated: May 21, 2025***
Google Workspace Identity Platform (IDP) is a cloud-based identity management system that enables secure authentication, single sign-on (SSO), and user access control across Google services and third-party applications.
## Actions
* **Create User** *(Containment)* - Adds a new user account to the domain.
* **Enable User** *(Containment)* - Reactivates a previously suspended user account.
* **Suspend User** *(Containment)* - Temporarily disables a user account.
* **List All Users** *(Enrichment)* - Retrieves a list of users in the specified domain.
* **List All Groups** *(Enrichment)* - Lists all Google Groups in the domain.
* **List Group Members** *(Enrichment)* - Lists all members of a specific group.
* **Get Group** *(Enrichment)* - Retrieves details of a specific group by group email.
* **Get User** *(Enrichment)* - Fetches detailed information about a specific user by email or user ID.
## Google Workspace IDP configuration
To [create service account credentials](https://developers.google.com/workspace/guides/create-credentials) in Google Workspace and generate the JSON file needed to configure the Google Workspace IDP integration, follow these steps:
1. Log in to the [Google Cloud](https://console.cloud.google.com) portal.
1. Select a Google Cloud project (or create a new one).
1. Go to the **APIs & Services > Credentials** page.
1. Click **CREATE CREDENTIALS** and select **Service account**.
})
1. Enter a service account name to display in the Google Cloud console. The Google Cloud console generates a service account ID based on this name.
1. Optional: Enter a description of the service account.
1. Skip two optional grant permissions steps and click **Done** to complete the service account creation.
})
1. Click on the generated service account to open the details.
})
1. Under the **KEYS** tab, click **ADD KEY** and choose **Create new key**.
})
1. Click on **CREATE** (make sure **JSON** is selected).
})
1. The JSON file is downloaded. Make sure you save it in a safe place.
1. Enable the Admin SDK API for the project at [https://console.cloud.google.com/flows/enableapi?apiid=admin.googleapis.com](https://console.cloud.google.com/flows/enableapi?apiid=admin.googleapis.com).
1. Go to [https://admin.google.com/ac/owl/domainwidedelegation](https://admin.google.com/ac/owl/domainwidedelegation) to open the Domain-Wide delegation settings in the Google Admin portal
1. Click on **Add new**.
})
1. In the **Client ID** field, provide the client ID from the JSON file.
})
})
1. In the **OAuth scopes (comma-delimited)** field, provide the following scopes:
})
1. Click **Authorize**.
})
## Configure Google Workspace IDP in Automation Service and Cloud SOAR
import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md';
import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md';
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
*
* **Private Key JSON**. Provide the content of the JSON file generated [above](#google-workspace-idp-configuration). Open the file and copy-paste the whole content in the field.
* **Admin Email**. Enter the email address of a Google Workspace admin user.
* **Domain**. Enter your Google Workspace [domain](https://support.google.com/a/answer/182080?sjid=839597157220156918-NC).
*
*
})
For information about Google Workspace IDP, see [Google Workspace IDP API documentation](https://developers.google.com/workspace/admin/directory/reference/rest).
## Change Log
* May 21, 2025 (v1.0) - First upload
* May 21, 2025 (v1.1) - Updated google logo in integration