{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-agen-for-work/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["Notification","LightboxImage"]},"type":"markdown"},"seo":{"title":"Google Workspace integration","siteUrl":"https://developers.frontegg.com/","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"google-workspace-integration","__idx":0},"children":["Google Workspace integration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Integrating Google Workspace with Frontegg lets your application manage users, groups, organizational units, roles, and custom user schemas in a Google Workspace domain through the Admin SDK Directory API — all via Frontegg's integration layer using Google OAuth 2.0."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Notification","attributes":{"title":"Prerequisites","type":"attention"},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["A Google Workspace account with ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["super admin"]}," privileges (the Admin SDK Directory API requires admin authorization at runtime)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Access to ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://console.cloud.google.com/"},"children":["Google Cloud Console"]}," with permission to create OAuth clients"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["A Google Cloud project (you can create one during setup)"]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"enable-the-admin-sdk-api","__idx":1},"children":["Enable the Admin SDK API"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"step-1-open-the-admin-sdk-api-in-the-api-library","__idx":2},"children":["Step 1: Open the Admin SDK API in the API library"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Go to the ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://console.cloud.google.com/apis/library/admin.googleapis.com"},"children":["Admin SDK API"]}," page in the Google Cloud Console. Select your project from the top navigation, then click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Enable"]}," if the API is not yet enabled. If you see ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Manage"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API Enabled"]},", the API is already active."]},{"$$mdtype":"Tag","name":"LightboxImage","attributes":{"isLightbox":true},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/google-workspace-1.49fc5b2bfe9e6dd5ee6884c708b53a7369816d57d669b5ae39a8e2b3a9ccc151.1ce25488.png","alt":"Admin SDK API page in Google Cloud Console"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"create-an-oauth-client","__idx":3},"children":["Create an OAuth client"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"step-2-go-to-the-credentials-page","__idx":4},"children":["Step 2: Go to the Credentials page"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In the left sidebar, navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["APIs & Services"]}," → ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Credentials"]},". Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create credentials"]},"."]},{"$$mdtype":"Tag","name":"LightboxImage","attributes":{"isLightbox":true},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/google-workspace-2.19b618dadbaaa129fdc0f493f56d0d889e2237c23246899b1f507f224323c97f.1ce25488.png","alt":"Credentials page with Create credentials button highlighted"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"step-3-select-oauth-client-id","__idx":5},"children":["Step 3: Select OAuth client ID"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["From the dropdown, select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["OAuth client ID"]},"."]},{"$$mdtype":"Tag","name":"LightboxImage","attributes":{"isLightbox":true},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/google-workspace-3.5c57f0035a095d20d7ba6c9951b8c41ca64ffef1a1d909d1a3a976c193c9563a.1ce25488.png","alt":"Create credentials dropdown with OAuth client ID highlighted"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"step-4-configure-the-oauth-client","__idx":6},"children":["Step 4: Configure the OAuth client"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["On the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create OAuth client ID"]}," page:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Set ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Application type"]}," to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Web application"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Enter a name for the client (for example, ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Frontegg Integration"]},")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Under ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Authorized redirect URIs"]},", click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add URI"]}," and add your Frontegg Redirect URL:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://YOUR_MCP_GATEWAY_URL/integration-callback"]}]}]}]}]},{"$$mdtype":"Tag","name":"LightboxImage","attributes":{"isLightbox":true},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/google-workspace-4.c314dc01e0782f8cd85d028e4df30e0fc1596b60b65d4694a3f9a642a9d1c691.1ce25488.png","alt":"OAuth client form with name and redirect URI filled in"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"step-5-create-the-client","__idx":7},"children":["Step 5: Create the client"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create"]}," to save the OAuth client. A dialog will display your ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client ID"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client Secret"]}," — copy both values and store them securely."]},{"$$mdtype":"Tag","name":"Notification","attributes":{"title":"Save your Client Secret now","type":"attention"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The Client Secret is only shown once in this dialog. After you close it, you cannot retrieve it again — you can only create a new secret."]}]},{"$$mdtype":"Tag","name":"LightboxImage","attributes":{"isLightbox":true},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/google-workspace-5.cfecf60f8d3a5e800afe83211f4865490887b3594383f8477a16b995cee112d3.1ce25488.png","alt":"OAuth client created dialog showing Client ID and blurred Client Secret"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"copy-your-credentials","__idx":8},"children":["Copy your credentials"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"step-6-locate-the-new-client-in-the-credentials-list","__idx":9},"children":["Step 6: Locate the new client in the credentials list"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["After closing the dialog, your new client appears in the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["OAuth 2.0 Client IDs"]}," list on the Credentials page."]},{"$$mdtype":"Tag","name":"LightboxImage","attributes":{"isLightbox":true},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/google-workspace-6.307cc7b783a15f2f2d496ed1037999f26e052b888454c86175be432a8c5ad47d.1ce25488.png","alt":"Credentials page showing the new Frontegg Integration client"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"step-7-view-the-client-id-in-the-client-detail-page","__idx":10},"children":["Step 7: View the Client ID in the client detail page"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click the client name to open its detail page. You can view and copy the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client ID"]}," at any time from the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Additional information"]}," section."]},{"$$mdtype":"Tag","name":"LightboxImage","attributes":{"isLightbox":true},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/google-workspace-7.5e43827288c703f931f98068a71a06838df78eeaafa6303cd851a1523146d117.1ce25488.png","alt":"OAuth client detail page showing Client ID"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"configure-the-frontegg-portal","__idx":11},"children":["Configure the Frontegg portal"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Once you have your ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client ID"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client Secret"]},", enter them in the Frontegg portal:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Frontegg portal"]}," and navigate to [ENVIRONMENT] → Integrations → Google Workspace."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Enter the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client ID"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client Secret"]}," in the corresponding fields."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Optionally, enter your ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Customer ID"]}," to scope all calls to a specific Google Workspace customer. Leave it empty to use the authenticated admin's domain (recommended). You can find your Customer ID in the ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://admin.google.com/"},"children":["Google Admin Console"]}," under ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Account"]}," → ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Account settings"]}," → ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Customer ID"]}," (for example, ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["C03az79cb"]},")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the required ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["scopes"]},":"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Scope"},"children":["Scope"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.user"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read, create, update, and delete users in the directory"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.user.readonly"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read-only access to users in the directory"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.user.security"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Manage user security settings (sign-in cookies, application-specific passwords)"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.group"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read, create, update, and delete groups in the directory"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.group.readonly"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read-only access to groups in the directory"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.group.member"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Manage group memberships"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.group.member.readonly"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read-only access to group memberships"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.orgunit"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Manage organizational units"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.orgunit.readonly"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read-only access to organizational units"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.rolemanagement"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Manage admin roles and role assignments"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read-only access to admin roles and role assignments"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.userschema"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Manage custom user schemas"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://www.googleapis.com/auth/admin.directory.userschema.readonly"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read-only access to custom user schemas"]}]}]}]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":5},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Save"]},"."]}]},{"$$mdtype":"Tag","name":"Notification","attributes":{"title":"Keep your credentials secure","type":"attention"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Never share or commit your Client Secret to version control."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"additional-resources","__idx":12},"children":["Additional resources"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://developers.google.com/admin-sdk/directory/reference/rest"},"children":["Admin SDK Directory API documentation"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://console.cloud.google.com/"},"children":["Google Cloud Console"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://admin.google.com/"},"children":["Google Admin Console"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://developers.google.com/identity/protocols/oauth2/"},"children":["Setting up OAuth 2.0"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/agen-for-work/connectors/redirect-url"},"children":["How to get your Redirect URL"]}]}]}]}]},"headings":[{"value":"Google Workspace integration","id":"google-workspace-integration","depth":2},{"value":"Enable the Admin SDK API","id":"enable-the-admin-sdk-api","depth":3},{"value":"Step 1: Open the Admin SDK API in the API library","id":"step-1-open-the-admin-sdk-api-in-the-api-library","depth":4},{"value":"Create an OAuth client","id":"create-an-oauth-client","depth":3},{"value":"Step 2: Go to the Credentials page","id":"step-2-go-to-the-credentials-page","depth":4},{"value":"Step 3: Select OAuth client ID","id":"step-3-select-oauth-client-id","depth":4},{"value":"Step 4: Configure the OAuth client","id":"step-4-configure-the-oauth-client","depth":4},{"value":"Step 5: Create the client","id":"step-5-create-the-client","depth":4},{"value":"Copy your credentials","id":"copy-your-credentials","depth":3},{"value":"Step 6: Locate the new client in the credentials list","id":"step-6-locate-the-new-client-in-the-credentials-list","depth":4},{"value":"Step 7: View the Client ID in the client detail page","id":"step-7-view-the-client-id-in-the-client-detail-page","depth":4},{"value":"Configure the Frontegg portal","id":"configure-the-frontegg-portal","depth":3},{"value":"Additional resources","id":"additional-resources","depth":3}],"frontmatter":{"category":"Identity","seo":{"title":"Google Workspace integration"}},"lastModified":"2026-05-19T15:06:34.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/agen-for-work/connectors/marketplace/google-workspace","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}