Google Workspace Integration

Connect Furl to Google Workspace using a service account with domain-wide delegation.

Description

Used as the customer’s user directory. Furl leverages this integration to map users to devices, support user targeting in remediations, and enrich context for accountability.

Configuration Steps

1. In the Google Cloud Console, create a new service account or use an existing one.
2. Generate a key in JSON format and save it securely.
3. Ensure the service account has domain-wide delegation enabled.
4. In the Admin Console (https://admin.google.com), navigate to:
   1. Security > API Controls > Domain-wide Delegation
5. Add the Client ID from the service account and authorize required scopes:
   1. https://www.googleapis.com/auth/admin.directory.group
   2. https://www.googleapis.com/auth/admin.directory.group.member
   3. https://www.googleapis.com/auth/admin.directory.user.readonly
   4. https://www.googleapis.com/auth/admin.directory.user

Required Configuration

Provide the following in Furl:

• Credentials JSON – Paste the contents of the JSON file
• Impersonate User – Email address of a super admin user in the domain

Supported Capabilities

Datasources

• Users → Import user directory information to map users to devices and support user targeting in remediations
• Groups → Import group memberships to understand organizational structure and support group-based targeting

Actions

Currently no actions are supported for this integration.

Troubleshooting

• Ensure the service account has domain-wide delegation enabled
• Verify all required scopes are authorized in the Admin Console
• Make sure the impersonate user has super admin privileges
• Check that the JSON credentials file is properly formatted

Back to Integrations

Documentation Home