Okta: G-Suite integration – provisioning and users import and export
Tags: tutorial, security
Published: 2019-10-25 09:48:11

---
title: Okta: G-Suite integration – provisioning and users import and export
published: true
date: 2019-10-25 09:35:34 UTC
tags: tutorial,security
canonical_url: https://rtfm.co.ua/en/okta-g-suite-integration-provisioning-and-users-import-and-export/
---


![](https://rtfm.co.ua/wp-content/uploads/2019/09/okta-logo.png)And going forward with Okta setup for our project.

Previous posts:

- [Okta: SSO authentication for Gmail and Slack](https://rtfm.co.ua/en/okta-sso-authentication-for-gmail-and-slack/)
- [Jenkins: SAML Authentication with Okta SSO and users groups](https://rtfm.co.ua/en/jenkins-saml-authentication-via-okta-and-users-groups/)
- [Jenkins: SAML, Okta, users groups, and Role-Based Security plugin](https://rtfm.co.ua/en/jenkins-saml-okta-users-groups-and-role-based-security-plugin/)
- [Github: SAML, Okta, and Github Enterprise Cloud – Organization SSO configuration](https://rtfm.co.ua/en/github-saml-okta-and-github-enterprise-cloud-organization-sso-configurartion/)

The next task is to integrate our [Google Suite](https://gsuite.google.com/) with Okta: need to configure an ability to import users to Okta from G Suite, and vise Versa.

In real we will use Okta as a _source-of-truth_ for users database and an authentication system and Okta will manage user accounts in G Suite but in this post let’s test both abilities.

Documentation:

- [Configuring Provisioning for G Suite](https://support.okta.com/help/s/article/28208416-Configuring-Provisioning-for-Google-Apps)
- [G Suite Provisioning](https://help.okta.com/en/prod/Content/Topics/Provisioning/Google/google-provisioning.htm)

### Okta – a G Suite App configuration

Go to Okta > _Applications_, click _Add Application_, find the G Suite application:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_133034-1.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_133034-1.png)

In the G Suite admin page go to _Domains_, find an organization’s _Primary Domain_:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_160803.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_160803.png)

Set it to the settings (this domain doesn’t play any role for provisioning, but used if you’ll use SAML SSO later):

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_161029.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_161029.png)

Set _Application username format_ as _Email_, everything other here can be left with the default values – Sign-On will be configured on the next time:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191022_112143.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191022_112143.png)

Save, switch to the _Provisioning_ tab:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_134136.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_134136.png)

#### G Suite Provisioning configuration

G Suite has to have API enabled, check the [documentation>>>](https://support.aodocs.com/hc/en-us/articles/205158773-Enable-G-Suite-APIs-in-your-domain).

In Okta – click on the _Configure API Integration_:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_134306.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_134306.png)

Click _Authenticate with G Suite_, log in to a necessary account:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_140225.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_140225.png)

Allow access:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_140256.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_140256.png)

Ready:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_140327.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_140327.png)

Click _Save_.

### Users import from G Suite to Okta

In Okta go to _Provisioning > To Okta_:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191022_113046.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191022_113046.png)

In the _User Creation & Matching,_ you configure how Okta will compare users from the G Suite account and Okta’s local database ([_Okta Universal Directory_](https://www.okta.com/products/universal-directory/)).

In this current case, a user’s email will be used as both G Suite and Okta will use the same value for it.

Time to run the import – switch to the _Import_ tab:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141037.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141037.png)

Click _Import Now_:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141201.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141201.png)

Wait 5-10 minutes, depending on your G Suite account size:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141227.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141227.png)

And all users from our G Suite now ready to be created in the Okta’s account:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141328.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141328.png)

Once you’ll Assign any of them – an account will be created in the Okta Universal Directory.

For example, here is an _Arseny_ user – it’s already present in both Okta account and G Suite, so Okta will skip it:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141736-3.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_141736-3.png)

But the second _Arseny_ will be created as this is another person with a different email a match didn’t apply.

Select a user from G Suite to be created in our Okta:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_162810.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_162810.png)

Here you can choose an action:

1. create a brand new account in Okta (default action)
2. attach it to an already existing Okta’s user
3. just ignore

Click on the _Confirm Assignments_:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_162943.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_162943.png)

And a new user is now created in Okta:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_163012.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_163012.png)

### Users export from Okta to G-Suite

Now let’s try to set up back-ward provisioning – an Okta’s user has to be created in the G Suite if now found there.

Go to _Provisioning > To App_, click _Edit_, enable necessary options:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_175427.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191021_175427.png)

For the testing purposes, you can enable only the _Create Users_, to avoid accidentally dropping already existing users in G Suite if any.

Click the _Save_.

Create a new user in the Okta’s database – go to the _Directory > People > Add Person_:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172357.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172357.png)

_ **Note:** an email domain must be already configured in the G Suite account_

Go back to the G Suite application, switch to the _Assignments_ tab and assign this new user:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172551.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172551.png)

Set values in hist profile for G Suite, at least need to configure _Organizational Unit_ (if OU’s are used of course):

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172616.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172616.png)

Check Okta’s logs:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172916.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172916.png)

And the G Suite account:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172823.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_172823.png)

### Notifications

The last thing is to configure notifications when a new user will be created in Okta if Okta made an import from G Suite.

Go to the _Settings > Account_, and in the _Admin Email Notifications_ block configure emails to be sent:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_173351.png "Okta: интеграция с G-Suite - provisioning, импорт и экспорт пользователей")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191023_173351.png)Done.

- [![](https://rtfm.co.ua/wp-content/plugins/share-me//assets/images/cercle/facebook.png)](http://www.facebook.com/sharer.php?u=https://rtfm.co.ua/en/okta-g-suite-integration-provisioning-and-users-import-and-export/&t=Okta%3A+G-Suite+integration+%26%238211%3B+provisioning+and+users+import+and+export "Share on Facebook")
- [![](https://rtfm.co.ua/wp-content/plugins/share-me//assets/images/cercle/twitter.png)](http://twitter.com/share?text=Okta%3A+G-Suite+integration+%26%238211%3B+provisioning+and+users+import+and+export-&url=https://rtfm.co.ua/en/okta-g-suite-integration-provisioning-and-users-import-and-export/&via=RTFM:%20Linux,%20DevOps%20and%20system%20administration "Tweet This Post")
- [![](https://rtfm.co.ua/wp-content/plugins/share-me//assets/images/cercle/googleplus.png)](https://plusone.google.com/_/+1/confirm?hl=fr-FR&url=https://rtfm.co.ua/en/okta-g-suite-integration-provisioning-and-users-import-and-export/ "Share on Google+")
- [![](https://rtfm.co.ua/wp-content/plugins/share-me//assets/images/cercle/tumblr.png)](http://www.tumblr.com/share/photo?source=https%3A%2F%2Frtfm.co.ua%2Fwp-content%2Fuploads%2F2019%2F09%2Fokta-logo.png&caption=Okta%3A+G-Suite+integration+%26%238211%3B+provisioning+and+users+import+and+export&clickthru=https%3A%2F%2Frtfm.co.ua%2Fen%2Fokta-g-suite-integration-provisioning-and-users-import-and-export%2F "Share on Tumblr")
- [![](https://rtfm.co.ua/wp-content/plugins/share-me//assets/images/cercle/linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://rtfm.co.ua/en/okta-g-suite-integration-provisioning-and-users-import-and-export/&title=Okta%3A+G-Suite+integration+%26%238211%3B+provisioning+and+users+import+and+export&source=RTFM:%20Linux,%20DevOps%20and%20system%20administration)

  

### Similar posts

- <small>10/23/2019</small> [Okta: интеграция с G-Suite – provisioning, импорт и экспорт пользователей](https://rtfm.co.ua/okta-integraciya-s-g-suite-provisioning-import-i-eksport-polzovatelej/)<small> (0)</small>  
- <small>10/21/2019</small> [Github: SAML, Okta, and Github Enterprise Cloud – Organization SSO configuration](https://rtfm.co.ua/en/github-saml-okta-and-github-enterprise-cloud-organization-sso-configurartion/)<small> (0)</small>  
- <small>10/21/2019</small> [Github: SAML Okta – настройка SSO в Github Enterprise Cloud – Organization](https://rtfm.co.ua/github-saml-okta-nastrojka-sso-v-github-enterprise-cloud-organization/)<small> (0)</small>  
- <small>09/30/2019</small> [Okta: SSO authentication for Gmail and Slack](https://rtfm.co.ua/en/okta-sso-authentication-for-gmail-and-slack/)<small> (0)</small>  
- <small>09/30/2019</small> [Okta: настройка SSO для Gmail и Slack](https://rtfm.co.ua/okta-nastrojka-sso-dlya-gmail-i-slack/)<small> (0)</small>