How to set Google Workspace with Single-Sign-On and user auto-provisioning

Prerequisites

  • A Google Workspace subscription.
  • A BenQ IAM administrator account. Please follow the normal steps to register a BenQ IAM admin account.

Configure Google Workspace SSO

Follow these steps to enable Google Workspace SSO in BenQ.

  1. Login BenQ IAM with BenQ admin account, click SSO Setting in the Account Management section.
  2. Select Google Workspace Settings in the pop up.
  3. Login or choose you Google Workspace administrator account.
  4. Click Allow to grant the access.
  5. Click Set up under Import account settings. This setting lets you sync the domain you prefer and import all accounts or specific groups from Google Workspace. By default, BenQ IAM will import all accounts from the primary domain. If you are satisfied with the default settings, you can skip to step 9.
  6. You can choose the domain you want and select either Import all accounts or Import by group.
  7. If you select Import by group, please fill in and add the group email you want according to Google Admin Console.
  8. Click Apply.
  9. Enable Automatic synchronization to activate user auto-provisioning from your Google Workspace directory.
  10. Click Sync now to finish the settings.