HENNGE Access Control Implementation Procedure List (Google Workspace)

Target

This is for customers who start to use Google Workspace and HENNGE Access Control with the single sign-on connection.

Propuse

Access control is performed by making a single sign-on connection between Google Workspace and HENNGE Access Control.

Cautions

1. Please check the necessary items according to the service/usage you are using.

2. The content of this article based on the product content as of March 2019 and may be revised without prior notice.

Contents

1. Advance Preparation

1.1. Confirmation of Global IP address
1.2. Confirm on User's Usage of Groupware (Access Environment)
1.3. HENNGE Device Certificate Device Information Gathering
1.4. HENNGE Access Control Operation Policy Review
1.5. HENNGE Access Control Operation Policy Setting

2. User Synchronization from Active Directory to Google Workspace・HENNGE Access Control

2.1. Prepare for Users on the Active Directory
2.2. About Google Cloud Directory Sync (Preparation and Setup of Installation)
2.3. About Google Cloud Directory Sync (Installation・Sart User Synchronization)
2.4. Prerequisites Checks for HENNGE Directory Sync Tool
2.5. Check on the Active Directory Domain Controller Structure and OS Versions
2.6. Adding the UNIX ID Component to all Domain Controllers (For 2008R2)
2.7. Adding the UNIX ID Component to all Domain Controllers (For 2012/2012R2)
2.8. How to install HDEPasswordFilter.dll on Active Directory (WS 2016 onwards)
2.9. Installation of HENNGE Directory Sync Tool
2.10. Execution of Assign-HDEOnePasswrdSyncGroup.bat
2.11. First time setting up the config.ini file for HENNGE Directory Sync Tool
2.12. Confirm on the Synchronization User Password Configuration
2.13. Execution of HENNGE Directory Sync Tool

3. Synchronization Setting for User Information from HENNGE Access Control to Google Workspace

3.1. How to configure the API consent for user provisioning (user synchronization) on Google Workspace?
3.2. How to perform Batch User Update?

4. Settings on the End User Side for use the HENNGE Access Control`s access control 

4.1. HENNGE Secure Browser Installation 
4.2. Authentication of HENNGE Secure Browser on Devices
4.3. Use application to receive OTP(One-Time Password)
4.4. Use email to receive OTP(One-Time Password) token
4.5. Issuing HENNGE Device Certificate
4.6. How to Install HENNGE Device Certificate

5. HENNGE Access Control access control Policy Setting

5.1. Assign Users to Access Policy Groups
5.2. Assign Devices to App Policy Groups

6. Settings for connection HENNGE Access Control and Google Workspace

6.1. Setting Up HENNGE Access Control SSO (Google Workspace) 
6.2. Confirmation of Single-Sign On (SSO) Status between HENNGE Access Control and Google Workspace
6.3. Google Workspace Authentication Disconnect

1. Advance Preparation

1.1. Confirmation of Global IP Address

Check the IP which allows access, since it is controlled by the source IP.

1.2. Confirm on User's Usage of Groupware (Access Environment)

Please check the usage environment of the end-user when considering and setting the access policy.

1.3.HENNGE Device Certificate Device Information Gathering

※ Please implement this section when you are using the HENNGE Device Certificate.

When issuing the HENNGE Device Certificate, information on the target device is required.
Please select the target device and collect information in advance.

1.4. HENNGE Access Control Operation Policy Review

Please consult with your implementation guide.

1.5.HENNGE Access Control Operation Policy Setting

HENNGE can be set up on your behalf. Please consult with your implementation guide.

2. User Synchronization from Active Directory to Google Workspace・HENNGE Access Control

※ When synchronizing users from Active Directory to HENNGE Access Control, please implement this section. 

※ Please note that the required tasks will be different depending on the version of Active Directory.

2.1. Prepare for Users on the Active Directory

2.2.About Google Cloud Directory Sync Preparation and Setup of Installation (External Link) 

Please check with Google company and your Google Workspace reseller for more information.

2.3.About Google Cloud Directory Sync Installation・Sart User Synchronization (External Link)

Please check with Google company and your Google Workspace reseller for more information.

2.4.Prerequisites Checks for HENNGE Diretory Sync Tool

2.5.Check on the Active Directory Domain Controller Structure and OS Versions

2.6.Adding the UNIX ID Component to all Domain Controllers (For 2008R2)

2.7.Adding the UNIX ID Component to all Domain Controllers (For 2012/2012R2)

2.8.How to install HDEPasswordFilter.dll on Active Directory (WS 2016 onwards)

2.9.Installation of HENNGE Directory Sync Tool

2.10.Execution of Assign-HDEOnePasswrdSyncGroup.bat

2.11.First time setting up the config.ini file for HENNGE Directory Sync Tool

2.12. Confirm on the Synchronization User Password Configuration

2.13. Execution of HENNGE Directory Sync Tool

3. Synchronization Setting for User Information from HENNGE Access Control to Google Workspace

※ Please implement this section When synchronizing the user from HENNGE Access Control to Google Workspace.

3.1.How to configure the API consent for user provisioning (user synchronization) on Google Workspace?

3.2. How to perform Batch User Update?

4.Settings on End User Side to Use HENNGE Access Control `s access control

4.1. HENNGE Secure Browser Installation

※ Please implement this section when applying the HENNGE Secure Browser.

HENNGE Secure Browser Installation (iOS)
HENNGE Secure Browser Installation (Android)
HENNGE Secure Browser Installation (Windows PC)
HENNGE Secure Browser Installation (macOS)

4.2.Authentication of HENNGE Secure Browser on Devices

※ Please implement this section when applying HENNGE Secure Browser.

4.3.Use application to receive OTP(One-Time Password)

※ Please implement this section when applying the OTP. 

4.4.Use email to receive OTP(One-Time Password) token

※ Please implement this section when applying the OTP. 

4.5. Issuing HENNGE Device Certificate

※ Please implement this section when applying the HENNGE Device Certificate. 

4.6. How to Install HENNGE Device Certificate

※ Please implement this section when applying the HENNGE Device Certificate. 

5. HENNGE Access Control access control policy setting

5.1.Assign Users to Access Policy Groups

5.2.Assign Devices to App Policy Groups

※ Please implement the 5.2 section when applying the HENNGE Secure Browser.

6. Settings for connection HENNGE Access Control and Google Workspace

6.1.Setting Up HENNGE Access Control SSO (Google Workspace)

6.2.Confirmation of Single-Sign On (SSO) Status between HENNGE Access Control and Google Workspace

6.3. Google Workspace Authentication Disconnect

          
Was this article helpful?

Frequently Asked Questions (FAQs)