This article describes the Google user sync integration, how to enable it, and considerations for its use.
Google User Sync enables admins to connect company-level accounts to Google Workspace accounts and automatically import users from Google to Phin, similar to the Azure User Sync for Microsoft users. Our privacy policy is here.
- This integration is in open beta and available to all partners.
- Admin-level permissions are required within Google Workspace to enable this integration.
- This integration reduces manual user management but relies on accurate group or organizational unit setup in Google Workspace.
How Do I Enable Google User Sync?
- Navigate to the integration page using the sidebar at the company level.
- Click the 'Google User Sync' tile.
- Carefully read the permissions related to how Phin will use the connection established between the Phin application and Google Workspace.
- Click Continue, where you will be redirected to the Google permissions page. Once you've selected and confirmed the Google permissions, you will be redirected back to the integration within Phin.
- Congrats! You should now see the Google User Sync page, where you can manage groups or organizational units that will be automatically synced from Google Phin.
Managing Users in Google User Sync
- Select your source type: Groups or Organizational Units (OUs).
- IMPORTANT! You can only sync users from one source type at a time. Switching from Groups to Organizational Units after enabling auto sync will end the sync, and it must be re-established by choosing new groups/OUs.
- IMPORTANT! You can only sync users from one source type at a time. Switching from Groups to Organizational Units after enabling auto sync will end the sync, and it must be re-established by choosing new groups/OUs.
- Use the drop-down menu to add one or more Groups/OUs. The table below the drop-down menu will display employee information, including their name, email, and source location.
- You will see the total number of users staged above the table on the right side update as you add and remove Groups/OUs.
- This number reflects staged users prior to enabling the auto sync.
- Click 'Enable Auto Sync' once you are ready to sync users into Phin.
- A notification will show you if enabling auto sync was successful. After a successful sync, you can navigate to the user management page to see the synced users.
- If it is not successful, you will be prompted to retry. If the sync repeatedly fails, here are the steps you should take:
- Disconnect and reconnect the feature
- Re-select Groups/OUs and click 'Enable Auto Sync' to re-attempt the sync.
- If the sync continues to fail, please feel free to reach out to our support team.
- After enabling the auto sync, when you add and remove Groups/OUs, the integration will save your choices automatically for the next time the sync runs.
- Alternatively, you can choose 'Sync Now' to push changes immediately.
- Alternatively, you can choose 'Sync Now' to push changes immediately.
What is the Auto Sync Schedule?
When Auto Sync is enabled, it runs on a 6-hour schedule relative to the time it was enabled. For example, enabling the sync at 4:32 PM will check for updates at 10:32 PM, 4:32 AM, 10:32 AM, etc.
What's the difference between Groups and Organizational Units?
In Google Workspace, Organizational Units (OUs) structure your organization's hierarchy and determine which services and features are available to a group of users. However, Google Groups allows for more granular control, enabling you to customize settings and access for specific users or groups without altering the organizational structure.
What's the 'Root' organizational unit?
In Google Workspace, the root organizational unit, also known as the top-level organizational unit, is the default group that contains all users and devices in your account. By default, all settings in the Google Admin console apply to this top-level unit and all users and devices.
How does Google User Sync deal with de-duplicating users?
- End-user records are matched on their email. When Google User Sync is enabled, the integration looks for potential duplicate records and updates manually input records with the user record identified from the sync.
- This does not affect the user's active training and training history.
- If a single user is found across multiple groups, the group column will represent this, but only one user record will be imported into Phin.
Additional considerations after enabling auto-sync
- Auto-sync runs every 6 hours, and you can identify the next run time at the bottom left of the user table on the Google User Sync page.
- If you have already enabled automatic welcome emails for the company, new users who have been synced will receive one without further configuration.
- The same goes for campaigns.
- For example, if a continuous campaign was set up before enabling Google user sync, and the newly synced users match the audience filter for segments such as full company or department, these users will automatically be enrolled in that campaign without further configuration.
- If users were imported manually and are found during the sync process, the data being pulled from Google user sync and the manual input data will be merged, with the sync data acting as the source of truth for the user going forward.
- Users who have been slept prior to turning on Google user sync will remain slept after enabling the sync and must be unslept on the user management page.
- Users who are deleted from Google Workspace will be slept in Phin.
- If a user's information changes in Google Workspace, that will be reflected in Phin during the next scheduled sync.
Knowledge Base
Phin works to update our Knowledge Base with new features with every release. You can read about the platform and its updates here: https://www.phinsec.io/knowledge.
Thanks for using our product!
We use all provided feedback to help drive Phin's development direction. Please keep reaching out and helping us shape the product's future! All ideas are welcome; please keep them coming!
The Dev Team @ Phin
Need help or have an idea for us? Click here!