Skip to main content

Sync Learners with G Suite Integration (Legacy)

Nick
  • Updated
Team: Huntress SAT (Security Awareness Training)
Product: SAT 
Environment: Google Suite
Summary: G Suite Integration- How to connect Google Directories to SAT.
 
In this article, we will explain how G Suite customers can connect their Google Directories to SAT learner groups to efficiently manage program users(which we call Learners). Syncing a SAT learner group with a G Suite account requires, first, that you configure the Google Directory settings and create a Service Account Key before connecting the directory to your SAT learners group.   

Steps 1-4 will guide you through the G Suite configuration in Google's Cloud Console. Step 4.3 Will require you to log into Google's Admin Center. Step 5 explains how to connect your directory to SAT. 

Step 1: Creating New Project

 Begin configuring your Google Directory by creating a new project in your Google Cloud Console. https://console.cloud.google.com/
  1. Sign into your Google Cloud Console. Click the “Projects" drop-down menu in the main navigation bar, then click "New Project".

  2. Give it a SAT-related name, for example, "SAT Integration", then click "Create". 

Step 2: OAuth Consent

  1. Select APIs & Services from the 3 bar menu in the top left corner of the screen, Then select OAuth consent screen.

  2. Under User type select Internal, then click Create.

    Step 2 12

  3. Enter "SAT" in the app name field.

  4. Select the "admin account" in the User Supported Email* field.

  5. Scroll down to Developer contact information and enter the Administrator's Email address then click Save and Continue.

    Step 2 345

You do not need to Add OR REMOVE A SCOPE at this time. Move on to Step 3.

Step 3: Enable API's & Services and Create Credentials

  1. Select Enabled APIs & service under APIs & Services

  2. Click the + ENABLE APIS AND SERVICES button at the Top of the screen

    Step 3 2

  3. Search for Admin SDK API then select it in the list

    Step 3 4

  4. Click the ENABLE button.

  5. On the next screen select the CREATE CREDENTIALS button in the Top right corner of the screen.

  6. Under Credential Type, leave Admin SDK API selected in the drop-down under Select an API*

  7. Check the button next to Application data

  8. Check the button next to No, I'm not using them then click NEXT.

    Step 3 678

  9. Under Service account details Service account name - add "SAT" then give it a description like "SAT Directory Integration", then select CREATE AND CONTINUE

    Step 3.9 small

  10. Under Grant this service account access to project click the dropdown, type in "viewer" then select Viewer in the list, then click CONTINUE

    Step3 10

  11. We do not need to Grant user access to this service account, select DONE

Step 4: Create Scope and .JSON file to be used in SAT

With Steps 1 - 3 complete, you will need to define and authorize the scope of access in your Google Admin Console before connecting your Google Directory to SAT.

  1. Navigate to IAM & ADMIN from the 3 bars in the top left corner of the screen and select Service Accounts

  2. Copy the numerical string under OAuth 2 Client ID.

    step 4 2

  3. Open a new browser tab and log into the Google Admin Account admin.google.com

  4. In the menu bar in the top left corner of the screen expand Security Access and data control Select API controls

    Step 4 4

  5. Select the MANAGE DOMAIN WIDE DELEGATION button at the bottom of the screen

  6. Click the Add New button then paste in the numerical string that was copied in Step 4.2

  7. In the OAuth scopes field copy and paste "https://www.googleapis.com/auth/admin.directory.user.readonly" without the quotation marks then click AUTHORIZE

    Step 4 67

  8. Navigate back to IAM & ADMIN and select Service Accounts

  9. Select the Keys tab at the top then click the ADD KEY dropdown to select Create new key

  10. Select JSON under Key type, then select Create. This will start a download which will be used in Step 5.

Step 5: Configure Google Sync in SAT

Now, with your Google Directory configured and Security Account Key saved, you are ready to connect the directory to your SAT learners group.

Follow these steps to connect your Google Directory to SAT:

  1. Sign into your SAT account and navigate to Settings Learners Groups Edit Groups Management Management Type and choose "Google Directory" as the management type and click "Update".

  2. Enter your Google domain into the "Domain" field on the configuration tab.

  3. Enter the email address of a user with administrator privileges into the "Admin User" field on the configuration tab.

    https://support.curricula.com/hs-fs/hubfs/GSuite Integration Article.png?width=688&name=GSuite Integration Article.png

  4. Open the service account's key (.json) file downloaded from previous steps in your preferred text editor application. Copy all the text and paste it into the "Key" field. Make sure to remove any extra blank lines added at the end when pasting, then click "Update".

If your connection is successful head over to the Syncing Options page to configure your sync settings.      

Comments

0 comments

Please sign in to leave a comment.

Related articles