Skip to main content
日本語 简体中文 繁體中文

[Access Control] Implementation Procedure Summary (Google Workspace)

Overview

This article introduces the series of procedures, from preliminary checks to starting Access Control operations, for customers using Google Workspace as their groupware who are implementing Access Control.

Preparation

  • HENNGE One Customer Portal account
    Check the Login URL for the Access Control Administration and the initial Admin account information.
    For instructions on checking this information, refer to [Customer Portal] Checking the List of HENNGE One Services.
  • An account with Google Workspace Super Admin privileges
  • An account with Access Control Global Admin permissions

Notes

  1. Check the required items according to the services and purposes of use.
  2. The content of this article is based on product information as of October 2026 and may be changed without notice thereafter.
  3. Before implementation, be sure to check HENNGE One System Requirements.
    It provides information on the limitations of each product and feature.

Table of Contents

  1. Various Access Control Policy Settings
    1. Consideration of access policies
    2. [Access Control] Define Access policy groups and Access policy templates 
    3. Password-related settings (Modern View) 
  2. User Registration and Synchronization
    • When creating an account in Access Control
    • When synchronizing from Active Directory
  3. Admin and End User Tasks Based on Access Policies
    • Distribute the certificate
    • Secure Browser Configuration
    • OTP（One-Time Password） Configuration
  4. Access Policy Assignment and Operation Test
    1. Assign Access Policy Group to Users (Modern View) 
    2. Perform Access Policy Group Operation Test (Modern View) 
  5. Single Sign-On Settings
    1. [Access Control] Single Sign-On (SSO) Connection Procedure (Google Workspace)
    2. Confirmation of Single-Sign On (SSO) Status between HENNGE Access Control and Google Workspace  
    3. Google Workspace Authentication Disconnect 

Procedure

1. Various Access Control Policy Settings

Starting in March 2026, Access Control has begun offering a new login screen.

If you subscribed to HENNGE One before the date above, complete the following procedure before starting the subsequent procedures.
[Access Control] Migration Procedure to the New Login Screen

Configure access policies (access permission conditions) when logging in to services through single sign-on from Access Control. Also configure the Password policy for the entire Tenant.
※Perform this procedure using an account granted Access Control Global Admin permissions.

  1. Consideration of access policies
    Determine the requirements you want to configure from the access control patterns in the table below.
    If you want to implement an access control method other than the patterns below, search the Help Center for the relevant procedure or Contact Us through your implementation representative.
  1. [Access Control] Define Access policy groups and Access policy templates 
    Configure the selected policies.
  2. Password-related settings (Modern View) 
    Configure the Password policy.

2. User Registration and Synchronization

The procedure differs depending on whether Users are synchronized from Active Directory or created in Access Control. Check the applicable procedure before proceeding.

When creating an account in Access Control

Perform this procedure using an account with Access Control Admin privileges.

  1. [Access Control] User Provisioning Settings (Google Workspace)
    Enable the user provisioning feature that automatically reflects user creation, changes, and deletions performed in Access Control to Google Workspace.

After completing this task, user changes in Access Control will be immediately synchronized to Google Workspace. To prevent unintended user deletions or changes, be sure to review the Notes before synchronization.

  1. Bulk User Registration/Update/Deletion (Modern View)
    To use Access Control, create users in Access Control that are linked one-to-one with users in Google Workspace.
When synchronizing from Active Directory

Perform this procedure using an account with Access Control Admin privileges and a Windows account with Active Directory Admin privileges.

Synchronize user information from Active Directory to Access Control and create users in Access Control.

  1. Define Synchronization Conditions and Receive the File
    Define the configuration values for the HENNGE Directory Sync Tool synchronization configuration file used for Active Directory synchronization, and receive the configuration file from HENNGE.
  2. Organize and prepare users on Active Directory
    Organize users in Active Directory, such as by placing users to be synchronized in the security groups or OUs specified in the synchronization configuration file.
  3. How to install HDEPasswordFilter.dll on Active Directory (WS 2016 or later)
    This task installs the DLL file, which is one of the configuration files for performing Active Directory synchronization, on all domain controllers.
  4. Restart the domain controllers
    Restart all domain controllers to apply the configuration file.
    ※ Please perform this task with consideration for operational impact, such as the time of execution.
  5. Change Passwords for Users to Be Synchronized on Active Directory
    Have each end user or an Admin change the Password of every user to be synchronized once.
    ※ Procedure 6 through 9 can be completed without waiting for all users to finish changing their Passwords.
  6. Installation of HENNGE Directory Sync Tool
    Install the user synchronization tool on Active Directory.
  7. [Access Control] Procedure for Installing the Root Certificate Required for HENNGE Directory Sync Tool Operation
    Install the Root Certificate required to operate the user synchronization tool.
  8. [Access Control] Creating an API Client for Executing the HENNGE Directory Sync Tool
    Create the API Client secret required to run the user synchronization tool.
  9. [Access Control] Initial Setup of HENNGE Directory Sync Tool Configuration File config.ini
    Place the synchronization configuration file in the designated folder in Active Directory.
  10. [Access Control] Checking the Password Settings for Synced Users
    Confirm that the Passwords for users to be synchronized have been configured as synchronization information.
  11. [Access Control] Running the HENNGE One Directory Sync Tool
    Run the synchronization tool to start user synchronization from Active Directory to Access Control.

3. Admin and End User Tasks Based on Access Policies

Based on your access control requirements, review the implementation procedures for the applicable features.

Perform the procedures in this section only when configuring access policies that use the respective features.
Click the feature you wish to use and perform the procedure.

Distribute the certificate

In the Access Control Administration, issue Device Certificates. Once the issued Certificate has been installed on the end user's device, preparation for using Device Certificates is complete.

  1. HENNGE Device Certificate Device Information Gathering 
    Collect the device ID (a unique value that differs for each device) of the devices to which Device Certificates will be distributed.
  2. [Device Certificate] Issuing a Device Certificate 
    This is the task of distributing Device Certificates to end-user devices.
    When an Admin issues a Device Certificate, an email prompting the end user to install the Certificate is sent.
  3. How to Install HENNGE Device Certificate? 
    This is the task of installing a Device Certificate on an end-user device.
    ※ This task must be performed on the end-user device.
OTP（One-Time Password） Configuration

Even when using OTP（One-Time Password）, you can skip this procedure if any of the following apply.
※ The registration screen will be displayed upon the first Login.
・An account with Access Control Admin privileges
・Users assigned to an Access policy group that requires OTP

  1. [Access Control] Configuration for Receiving OTP (One-Time Password) via Connected Application 
    Install the dedicated Connected Application and configure OTP receipt.
    ※ This task must be performed on the end-user device.

OTP can only be received on one device per User.

When issuing OTP for Users who use Access Control as Shared users, you can also use the configuration for receiving OTP via Email Address instead of a Connected Application, so that multiple people can receive OTP.
[Access Control] Configuration for Receiving OTP (One-Time Password) via Email 
Secure Browser Configuration
  1. [Secure Browser] Installation and Device Authentication for Secure Browser 
    This is the task of installing Secure Browser on an end-user device.
    ※ This task must be performed on the end-user device.
  2. Device Authentication for Secure Browser 
    This explains how an Admin performs device authentication so that Users can begin using HENNGE Secure Browser.

With the procedures up to this point, all Configuration required before starting Access Control operation is complete.
In the next procedure, test the operation of the Access policy configured before starting operation.

4. Assigning Access Policies and Operation Testing

  1. Assign Access Policy Group to Users (Modern View) 
    Assign Access policies to the Users created in Access Control.
  2. Perform Access Policy Group Operation Test (Modern View) 
    After assigning the Access policy, have the Target User log in to the Access Control user screen and test whether access control functions as intended.

After the operation test is complete, configure single sign-on (Federate) with Google Workspace in the next procedure and begin operation.

5. Single Sign-On Configuration

When you perform this procedure, authentication when end users log in to Google Workspace will switch to Access Control. Please carefully coordinate the implementation timing, such as avoiding business hours.
  1. [Access Control] Single Sign-On (SSO) Connection Procedure (Google Workspace)
    Establish a single sign-on connection between Google Workspace and Access Control, and begin production operation.

If you use a Chromebook, also perform [Access Control] Chromebook Single Sign-On (SSO) Connection Procedure.
  1. Confirmation of Single-Sign On (SSO) Status between HENNGE Access Control and Google Workspace 
    Confirm that single sign-on has been correctly configured with Google Workspace.

If you use a Chromebook, also perform [Access Control] Verify Single Sign-On (SSO) Connection for Chromebook .
  1. Google Workspace Authentication Disconnect 
    Even if Single Sign-On is performed, existing authentication information (sessions logged in before performing Single Sign-On) is retained. Therefore, disconnect all authentication sessions once and require Users to log in through Access Control.

This completes all Access Control implementation procedures.

If you want to use Single Sign-On with services other than Google Workspace

The procedure for configuring Single Sign-On varies depending on the service.
Manuals for services that have been verified by HENNGE are available in the Help Center. Please follow the relevant manual to complete the configuration.

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.