Embedded Files
Overview
Integrating Google Directory with Zaperon enables organizations to synchronize users and groups from Google Workspace into the Zaperon Admin Dashboard. This provides centralized identity management and ensures that user and group information used for authentication, access control, and Zero Trust policies remains aligned with the organization's Google Workspace directory.
Zaperon uses the Google Admin SDK and a Google service account with authorized domain-wide delegation to securely access supported Google Workspace Directory information.
Google Directory integration helps organizations reduce manual user provisioning, maintain accurate identity information, and apply consistent access policies based on synchronized users and groups.
What is Google Directory Integration in Zaperon?
Google Directory integration connects Zaperon with your organization's Google Workspace Directory so that supported identity information can be synchronized from Google Workspace into Zaperon.
The integration uses a Google Cloud service account and domain-wide delegation to authorize access to the required Google Workspace Directory APIs. This allows Zaperon to retrieve supported user, group, and user-schema information for centralized identity management.
Once connected, synchronized directory information can be used across Zaperon for:
Centralized user and group management
Identity-based access control
Zero Trust application access policies
User provisioning and deprovisioning
Group-based security policies
Consistent identity information across Zaperon
Why Integrate Google Directory with Zaperon?
Automated identity synchronization: Keep supported user and group information aligned with Google Workspace.
Reduced manual administration: Minimize repetitive user provisioning and account maintenance.
Centralized access control: Use synchronized identities and groups when applying Zaperon security policies.
Improved identity accuracy: Keep Zaperon identity information aligned with the organization's primary directory.
Faster onboarding and offboarding: Reflect directory changes in Zaperon through synchronization.
Zero Trust policy alignment: Use current user and group information for identity-centric access decisions.
Compliance Readiness: Maintain a verified, auditable identity source that supports governance and regulatory compliance requirements across frameworks including GDPR, HIPAA, SOC 2, RBI, and SEBI
Key Use Cases
Centralized Google Workspace User Provisioning
Synchronize users from Google Workspace into Zaperon to reduce manual account creation and maintain a consistent identity inventory.
Group-Based Access Control
Use synchronized Google Workspace groups to support role-based and group-based access policies across Zaperon applications and resources.
Automated Identity Updates
Keep user and group information current by synchronizing changes from Google Workspace instead of manually maintaining identity records in Zaperon.
Zero Trust Application Access
Use synchronized Google Workspace identities as part of identity-centric access decisions for applications protected by Zaperon.
Consistent User Lifecycle Management
Maintain accurate access by keeping Zaperon identity information aligned when users are added, updated, or removed from the connected Google Workspace directory.
Prerequisites
Before integrating Google Directory with Zaperon, ensure that you have:
A Google Workspace Super Admin or administrator account with the required permissions.
Access to the Google Cloud Console.
Access to the Google Workspace Admin Console.
Permission to create a Google Cloud project and service account.
The Admin SDK API enabled in the Google Cloud project.
A Google service account configured for domain-wide delegation.
The required Google Workspace OAuth scopes authorized for the service account.
The downloaded JSON service account key file available for configuring the Zaperon directory connection.
Administrator access to the Zaperon Admin Dashboard.
Security Note: The downloaded JSON key file contains private credentials. Store it securely and do not share or expose the private key.
Steps to Integrate Google Directory in Zaperon
A. Create and Configure a Google Cloud Project
A.1. In your browser visit → https://console.cloud.google.com/ and login to Google Cloud Console using your Google Workspace Super Admin account then search and at the top navigation bar click the project selector dropdown and click New Project.
A.2. Enter the Project Name Zaperon-Directory-Sync and click on Create button.
A.3. In the left navigation menu then click on APIs & Services > Library.
A.4. In the search bar search for Admin SDK and click on Admin SDK API in the search list.
A.5. In Admin SDK API page click Enable.
A.6. In the left navigation menu then click on APIs & Services > Credentials.
A.7. Next click the + Create Credentials at the top button and select service Account option.
A.8. Enter the Service Account details in step 1 and click Create and continue. Skip the optional step 2 and click Create and close in final step 3.
A.9. On the Credentials page agian click on your newly created Service Account under the Service Accounts section.
A.10. In Details tab click on Advance Settings accordion Under Domain-Wide Delegation copy the Client ID this you will need to paste in section B.3 steps.
(Optional Step: Check the box for Enable Google Workspace Domain-wide Delegation if prompted and click Save.)
A.11. Then switch to the Keys tab at the top of the Service Account page. and click Add Key > Create new key. Then modal will appear select JSON as the Key type.
and click Create. A ".json" file will automatically download to your computer.
Security Note: Keep this downloaded key ".json" file secure. It contains your private key and connection parameters.
B. Authorize the Service Account in Google Workspace Admin Console
B.1. In your browser visit → https://admin.google.com/ and login to Google Workspace Admin Console using your Google Workspace Admin account. Then In the left menu, navigate to Security > Access and data control > API Controls and click Manage Domain Wide Delegation.
B.2. Next click on Add new button.
B.3. Enter Client ID and OAuth Scopes details and then click on Authorise button.
C. Providing Connection Details to Zaperon
C.1. Locate and open the JSON key file in any notepad or a text editor your computer. Refer section A.11. and copy the Private Key, Private Key ID, Client Email and Client ID and paste in section D.2.
{
"type": "service_account",
"project_id": "zaperon-sync-project",
"private_key_id": "******************************",
"private_key": "-----BEGIN PRIVATE KEY-----\nMIIEvQsdasdsadsaBgkqhkiG...-----END PRIVATE KEY-----\n",
"client_email": "zaperon-sync-service-account@zaperon-sync-project.iam.gserviceaccount.com",
"client_id": "*************************"
}
D. Configuring Google Directory in Zaperon Admin Dashboard.
D.1. In the Admin Dashboard, go to Directories >Add Directory.
D.2. Fill all the details in Basic Settings section & click Connect.
D.3. A confirmation dialog will appear directory successfully connected to Zaperon.
D.4. In Attribute Mapping tab, you can create mapping of the columns in directory to attributes in Zaperon. Click on Add Custom Attribute to create a mapping.
D.5. New custom attribute field can be linked to the columns of directory. After filling details click Save.
D.6. Click on Next.
D.7. In Group Attribute tab, you can map groups columns in directory in Zaperon and click Save.
D.8. A confirmation dialog will appear. directory saved successfully.
D.9. You’ll see new Google Directory in directory table has been added and data will be automatically synced in Zaperon. For subsequent sync, you can click on sync icon in the Actions column.
Note: Syncing your Google Directory will override existing directory data in Zaperon. Ensure your Google Directory data is accurate and up to date before initiating a sync to avoid overwriting correctly configured user or group information in Zaperon.
What Happens After Integration?
After integrating Google Directory, administrators can manage the connection based on identity and access requirements. Keeping the directory synchronized helps ensure that users and groups in Zaperon reflect the current Google Workspace directory structure. You can manually synchronize the directory when updated user or group information needs to be reflected in Zaperon. The integration can also be edited when connection or synchronization settings change. If the Google Directory integration is no longer required, it can be removed from Zaperon after reviewing any users, groups, or policies that depend on the synchronized identity information.
Manage Directory
Once a directory is added in Zaperon, you can manage it throughout its lifecycle without reconfiguring the integration.
Use the following options to update settings, control sync behavior, or remove the directory when it is no longer required:
→ Refer to Sync a Directory.
→ Refer to Edit a Directory.
→ Refer to Delete a Directory.
Summary
Integrating Google Directory with Zaperon provides centralized synchronization of Google Workspace users and groups for identity management and policy-based access control. By combining the Google Admin SDK, service account authentication, domain-wide delegation, and Zaperon directory synchronization, organizations can reduce manual provisioning, maintain accurate identity information, and support consistent Zero Trust access policies.
A properly configured Google Directory integration provides a reliable identity foundation for securing applications, users, and resources across the Zaperon platform.
Google Sites
Report abuse