Quick Connect for Cloud Services 3.7 - Administrator Guide

Step 2: Configure a connection to Google Apps

For instructions on how to create a new connection to Google Apps, see Creating a Google Apps connection.

Step 3: Create a new synchronization workflow

For instructions on how to create a new synchronization workflow, see the Quick Connect Administrator Guide.

Step 4: Configure a step to provision OUs

1. Open the workflow you created in Step 3: Create a new synchronization workflow (in the Quick Connect Administration Console, on the Workflows tab, click the workflow name), and then click the Add synchronization step link.
2. On the Select an action page, click Provision, and then click Next.
3. On the Specify source and criteria page, do the following:
   1. In the Source connected system option, click the Specify button, then click Select existing connected system, and select the Active Directory connection you configured in Step 1: Configure a connection to source Active Directory domain.
      Click Finish.
   2. In the Source object type option, click the Select button, and then select the organizationalUnit object type from the list. Click OK.
   3. Click Next.
4. On the Specify target page, do the following:
   1. In the Target connected system option, click the Specify button, then click Select existing connected system, and select the Google Apps connection you configured in Step 2: Configure a connection to Google Apps.
   2. In the Target object type option, click the Select button, and then select the OU object type from the list. Click OK.
   3. Use the Target container option to specify the target Google Apps containers to which you want to provision organizational units from the Active Directory domain.

   If you want to use a PowerShell script to specify target containers in Google Apps, make sure the script returns the target containers in the format required by One Identity Quick Connect Sync Engine. For details, see Specifying Google Apps containers using a PowerShell script.

   1. In the Rules to generate unique object name option, specify rules for generating names for the OUs to be created in Google Apps.
   2. Click Next.
5. Optionally, you can use the Initial Attribute Population Rules area on the Specify provisioning rules page to specify additional settings for the OUs to be provisioned.

   For this purpose, you can use special attributes provided by the Google Apps Connector. For more information about these attributes, see Google Apps data supported out of the box.

6. Click Finish to close the wizard.

Step 5: Configure a step to provision users

1. Open the workflow you created (in Quick Connect Administration Console, on the Workflows tab, click the workflow name), and then click the Add synchronization step link.
2. On the Select an action page, click Provision, and then click Next.
3. On the Specify source and criteria page, do the following:
   1. In the Source connected system option, click the Specify button, then click Select existing connected system, and select the Active Directory domain you connected in Step 1: Configure a connection to source Active Directory domain.
      Click Finish.
   2. In the Source object type option, click the Select button, and then select the User object type from the list. Click OK.
   3. Click Next.
4. On the Specify target page, do the following:
   1. In the Target connected system option, click the Specify button, then click Select existing connected system, and select the Google Apps system you connected in Step 2: Configure a connection to Google Apps.
   2. In the Target object type option, click the Select button, and then select the User object type from the list. Click OK.
   3. Use the Target container option to specify the target Google Apps containers to which you want to provision users from the Active Directory domain.

   If you want to use a PowerShell script for specifying target containers in Google Apps, make sure the script returns the target containers in the format required by One Identity Quick Connect Sync Engine. For details, see Specifying Google Apps containers using a PowerShell script.

   1. In the Rules to generate unique object name option, specify rules for generating user names for the user objects to be created in Google Apps.
   2. Click Next.

5. Use the Initial Password option on the Specify provisioning rules page to set an initial password for each user to be created in Google Apps. Make sure the password meets the requirements set by Google Apps.
6. Use the Initial Attribute Population Rules option to specify values for the FamilyName and GivenName attributes that are required to create a user object in Google Apps. For more information about these attributes, see User object attributes.

   Optionally, you can use the User Account Options option to configure additional settings for the users to be provisioned. This option provides the following check boxes:

   • User must change password at next logon. Allows you to force the provisioned users to change their initial passwords at their next logon to Google Apps.
   • Account is disabled. Allows you to disable the user accounts created in Google Apps in the result of the provision operation.

7. Click Finish to close the wizard.