Integration profile
Directory source · Google Workspace Directory
Configure a read-only source and preview identity matching before apply.
Demo baseline · November 13, 2026Connection and scope
Enable Admin SDK and authorize admin.directory.user.readonly through domain-wide delegation. Secret JSON is the dedicated service account key (client_email/private_key); subject must be a delegated administrator. Alternatively supply a short-lived accessToken. No write directory scope is requested.
- Transport
google- External ID
id- Default coalescing path
primaryEmail
Provider fields
| Key | Label | Example |
|---|---|---|
customer | Workspace customer ID | my_customer |
subject | Delegated administrator email | directory-reader@example.com |
Default mapping
| Source | Target | Transform |
|---|---|---|
name.givenName | firstName | text |
name.familyName | lastName | text |
primaryEmail | email | lower |
primaryEmail | username | lower |
id | ldapCorrelationId | text |
Verify and troubleshoot
Preview, apply, and diagnose a directory import. Verify the immutable key, existing-account match, complete pagination and disable thresholds before applying.