Target
- Access Control administrators
- Customers synchronizing with Google Workspace and user provisioning
Purpose
- Enable user provisioning from Access Control to Google Workspace.
Notes
- This article is based on the product specifications as of April 2025 and may change without notice thereafter.
- After performing this task, editing user information (create, update, delete) will be done in Access Control.
- After this task, user changes (create, update, delete) made in Access Control will be synchronized to Google Workspace.
- Changes made in Google Workspace will not be synchronized to Access Control.
- If it is necessary to add users created in Google Workspace to a Google Group, it must be done separately from Google Workspace.
- This task requires global administrator privileges for Access Control and privileged administrator account information for Google Workspace.
- Please refer to the following article for how to access the administration screen.
How to access the Access Control administration screen
Procedure
Google Workspace API Settings
1. Access the [Google Admin Console] with a Google Workspace privileged administrator account.
2. Go to [Show all] - [Security] - [Access and Data Management] - [API Controls] - [Domain-wide Delegation].
3. Click [Add new] on the [Domain-wide Delegation] screen.
4. Enter the contents of [API Client Registration①] from the HENNGE One Connection Settings Sheet provided by HENNGE, and click [Authorize].
Example of setting string (values vary for each customer)
・Enter "Client Name" in [Client ID].
000000000000-0aa0aaaaaaaaaaa00a0aaaaaaaaaa0aa.apps.googleusercontent.com
・Enter "One or more API scopes" in [OAuth Scopes (comma-separated)].
https://www.googleapis.com/auth/admin.directory.user
5. Click [Add new] again on the [Domain-wide Delegation] screen.
6. Enter the contents of [API Client Registration②] from the HENNGE One Connection Settings Sheet provided by HENNGE, and click [Authorize].
Example of setting string (values vary for each customer)
・Enter "Client Name" in [Client ID].
000000000000.apps.googleusercontent.com
・Enter "One or more API scopes" in [OAuth Scopes (comma-separated)].
https://mail.google.com/
7. Confirm that the information of the added API client is displayed on the screen.
Access Control Provisioning Settings
1. Access the Access Control administration screen.
2. Select [System] - [Provisioning Settings] from the left menu.
3. Click [View Details] in the [Google Workspace] menu under [Synchronization from HENNGE Access Control].
4. Enter the following settings and click [Save Changes].
[Account Provisioning]: "Enabled" ※Please enable the toggle.
[Password Provisioning]: "Disabled" ※Please disable the toggle.
[Google Workspace administrator account]: Email address of the account with Google Workspace privileged administrator rights
※ By enabling [Password Provisioning], you can synchronize passwords in Access Control to Google Workspace, but there are considerations for this setting, so please consult with your HENNGE One implementation representative in advance.
※ Please specify an account that will not be deleted in the future for [Google Workspace administrator account].