Sync with Google Workspace

Evo Security syncs with Google Workspace service. Your users will be able to login using Evo, with their network credentials. The user will be required to enter a code based on multi-factor authentication (MFA) being enabled, and their credentials are authenticated by your network.

Requirements

These instructions assume:
• Organization configured for Google Workspace.
• All users have been created under Google Workspace.
• All users have a unique email address, specific to their user.
• All users are a member of a group to be synced.
• The user(s) in question exist locally on the workstation. 

Google Workspace configuration

1. Go to https://console.cloud.google.com/
2. Create a new project under your domain.
3. Navigate to API & Services.

   
   
4. From the left-side navigation, click Library.
5. Search for the "Admin SDK API".

   
   
6. Enable the Admin SDK API if it is not already enabled, and head back to dashboard.
7. Before we continue, we also need to create an OAuth Consent screen for the new Google Workspace Project.
8. While in the project, click OAuth Consent Screen.

   
   
9. Select Internal and Create.
10. Fill in the fields with your correct information. When you get to the Authorized domains portion, enter "evosecurity.com"
    
    
11. Save and continue.
12. Next, we will set the following Scopes. Refer to Screenshot for the scope information that should be set. All of these are found within the same Add or Remove Scopes screen.

    
    • Non-Sensitive Scopes:
      • .../auth/userinfo.email
      • .../auth/userinfo.profile
      • openid
    • Sensitive Scopes:
      • .../auth/admin.directory.user.readonly
      • .../auth/admin.directory.user.alias.readonly
      • .../auth/admin.directory.group.readonly
      • .../auth/admin.directory.orgunit.readonly
        
        
13. Once this is done, let's head back to the credentials and create a new OAuth 2.0 Client.
14. Click Create Credentials and create a new OAuth Client ID.

    
15. Select Web Application.

16. Name the app what you would like, then add the following Authorized JavaScript origins and Authorized redirect URIs:
    1. • For Authorized JavaScript origins add:
         • https://your-environment-url.evosecurity.com
       • For Authorized redirect URIs add:
         • https://your-environment-url.evosecurity.com
         • https://your-environment-url.evosecurity.com/oauth2callback
           
           
17. Click Create.

18. Once that's done, you'll get your Client ID and Client Secret.
19. In another tab, login to your Evo Portal.
20. From the left nav menu, select My Company. Alternatively, select Customers and and choose a customer from the list.
21. Select Directories.
22. Click "Add New Directory" and select the Google Workspace option.
23. Enter a directory name.
24. Download the JSON and you will copy/paste the content from that JSON into your Evo Security admin portal under the Paste JSON Client Secret.

    
    
25. Once entered, click "Get OAUTH Code" and you'll be redirected to sign into your Google Workspace account.
26. Sign in, accept the integrations, and you'll be given the OAuth Code.
27. Paste that into the OAuth field and create your Google Workspace Directory!

    

Now that you’ve completed the configuration for Google Workspace, your users will be able to authenticate with Evo. 
If you’ve experienced any issues with the configuration, please contact us and we’re happy to help.