How to configure the API consent for user provisioning (user synchronization) on Google Workspace

Target

This procedure is written for administrators to configure the user synchronization from HENNGE Access Control to Google Workspace.

Purpose

To enable user provisioning from HENNGE Access Control to Google Workspace.

Caveat

1. After completing these procedures, it is recommended that the user information be edited (Created, Modified, Deleted) on HENNGE Access Control.

2. After completing these procedures, user information edited on Access Control will be synchronized to Google Workspace automatically.

3. Changes on Google Workspace will NOT be synchronized to HENNGE Access Control automatically.

4. For users created by synchronization in Google Workspace, Google Group will still need to be configured in Google Workspace.

5. HENNGE Access Control Admin account credentials are needed for this setup.

6. Google Workspace Admin account credentials are needed for this setup.

7. This procedure was written in March 2019; procedures and screenshots are subject to possible changes.

Procedures

1. Google Workspace API Configuration

1.1. Access the Google Admin Console with the Google Workspace Admin account.

Screen_Shot_2019-07-09_at_12.19.20.png

1.2.  Under "Security", search for "App access control" and click to enter this option.Screen_Shot_2020-07-07_at_14.25.44.png

1.3. Next, look for "Manage Domain Wide Delegation" and click on it.

Screen_Shot_2020-07-07_at_14.26.09.png

1.4. Next, click on "Add new".

Screen_Shot_2020-07-07_at_14.26.25.png

1.4. From the files and information provided by HENNGE support, look for the file named HENNGE One_settings_sheet.xlsx and fill in the values for "Client Name" and "One or More API Scopes" and click "Authorize".

Sample Configuration Value (May vary for the different customer)

・Client Name

000000000000-0aa0aaaaaaaaaaa00a0aaaaaaaaaa0aa.apps.googleusercontent.com

・One or More API Scopes

https://www.googleapis.com/auth/admin.directory.user

Screen_Shot_2020-07-07_at_14.26.38.png

1.5. From the files and information provided by HENNGE support, look for the file named HENNGE One_settings_sheet.xlsx and fill in the values for "Client Name" and "One or More API Scopes", and click on "Authorize".

Sample Configuration Value (May vary for the different customer)

・Client Name

000000000000.apps.googleusercontent.com

・One or More API Scopes

https://mail.google.com/

Screen_Shot_2020-07-07_at_14.26.38.png

1.6. Confirm that the API Client Information has been successfully entered and appeared on the page.

Screen_Shot_2020-07-07_at_14.33.28.png

2. HENNGE Access Control [ Provisioning Settings ]

2.1. Access the HENNGE Access Control Admin Control page.

Screen_Shot_2019-07-09_at_12.12.56.png

2.2. Under "System", "Domain Setting", and "Provisioning Settings" click on "Edit".

Screen_Shot_2019-07-09_at_12.14.31.png

2.3. Input the value into the system.

Screen_Shot_2019-07-09_at_12.15.45.png

2.3.1. [ Account Provisioning ] : "Enable"

2.3.2. [ Password Provisioning ] : "Disable"

2.3.3. [ Google Workspace administrator account ]: An Google Workspace admin account E-mail Address is needed to be entered.

※ If [ Password Provisioning ] is enabled, the HENNGE Access Control password will be synchronized to Google Workspace. To enable this setting, please consult with HENNGE One Support.
※ Please specify an account that will not be deleted in the future as the account set in [Google Workspace administrator user].

          
Was this article helpful?

Frequently Asked Questions (FAQs)