Sync Learners with G Suite (New)

New feature as of May 2024: When syncing with G Suite, you may now opt to sync an individual group within G suite instead of syncing all learners. 

Step 1: Create an Integration Provider

First, you will need to create an integration connection with Google.

1. Sign in to your Huntress Security Awareness Training (SAT)/Curricula account and navigate to Integration Providers by clicking “Settings” in the top navigation and then clicking “Providers” in the left navigation. 
2. Click “+ Add a provider”
   
3. Select the “Connect” link in the Google tile.
   
4. Log in with your Google Admin account. 
   
5. Authenticate with your Google account and click “Accept” on the Permissions requested.
   

Note: If you recieve an admin policy enforce error, follow the steps below in Google:  

1. Go to Security >API Controls >App Access Control.
2. Click on Configure New App.
3. Select OAuth App Name or Client ID from the dropdown menu.
4. Type Security Awareness Training or Curricula.
5. Click each one until you find the one that has the same Client ID that is showing up in the error message.

Step 2: Map a SAT group to your Google Directory.  This is a mandatory step to set up a group sync.

1. If you aren’t automatically sent to the group setup step after connecting your SAT account to Google, click “+ Connect a group” on the Providers detail page.
   
2. Choose whether you want to connect to an existing SAT group or create a new one. Please note that the ‘Staff’ group is created by default in all SAT accounts, and there is a one-to-one mapping between an SAT group and a Google mapping.
   
3. Configure the group settings
   
   
   • Optional: Choose whether you want to sync all learners from G Suite, or a dedicated group of learners from your directory. 
   • We recommend the following settings:
     1. Enabled:
        
        1. “Automatic Daily Sync” - This setting will schedule updates every 24 hours to keep your learner's list up-to-date. 
        2. Attribute Options - Unless there are fields you explicitly want to ignore, we recommend leaving them all enabled.
        3. Set non-present learners to "Inactive" status - enable - If you ever delete identities in Google Directory without setting them as “Inactive,” this setting will detect that and set learners who no longer appear in Active Directory as “Inactive.”
        4. Create Departments as needed - This will automatically create Departments in the SAT platform once they are seen as part of the sync
     2. Disable:
        1.  Set present learners to "Active" status. - By enabling this setting, Curricula will ignore your resource’s “status” field when syncing users. Any users present in your resource will be set to “Active” status in the Curricula app after the sync is complete, even if they are marked as inactive or suspended in your directory.
4. Click “Preview & Sync” for stats and detailed information about how identities would be impacted under the' Log tab.'
   
   
5. If everything looks correct, click “Apply Manual Sync.”
6. After this initial sync, you can view results or download a CSV sync record under the Log tab.
   
7. By running the manual sync, you have completed the configuration and have saved your changes. You can return to Settings->Integrations-> Provider to add more groups within the sync or modify settings.

Note: By setting up the integration, we will automatically mark any domains associated with your Google account as verified.