Connect via Service Account

This guide explains how to integrate Google Workspace with Zluri using Service Account authentication and domain-wide delegation. This allows Zluri to access user data, groups, licenses, and audit logs from Google Workspace.

Prerequisites

• Admin access to the Google Admin Console
• Admin access to the Google Cloud Console
• Service Account created in the Google Cloud project
• Verified domain in Google Workspace
• Google Workspace Admin credentials for domain-wide delegation

Step 1: Get API Credentials at Google Workspace

1. From your Google Workspace domain’s Admin Console, navigate to Main menu > Security > API Controls.

2. In the Domain wide delegation pane, select Manage Domain Wide Delegation.

3. Click Add new.

4. In the Client ID field, enter the Zluri service account's Client ID:
   112390080167718584607

5. In the OAuth scopes (comma-delimited) field, enter the following scopes:

   https://www.googleapis.com/auth/admin.directory.domain.readonly,
   https://www.googleapis.com/auth/admin.directory.group.readonly,
   https://www.googleapis.com/auth/admin.directory.orgunit.readonly,
   https://www.googleapis.com/auth/admin.directory.user.readonly,
   https://www.googleapis.com/auth/admin.directory.user.security,
   https://www.googleapis.com/auth/admin.reports.audit.readonly,
   https://www.googleapis.com/auth/admin.reports.usage.readonly,
   https://www.googleapis.com/auth/apps.licensing

   For workflow actions, also add:

   https://www.googleapis.com/auth/admin.directory.group,
   https://www.googleapis.com/auth/gmail.settings.basic,
   https://www.googleapis.com/auth/gmail.settings.sharing

6. Click Authorize.

Step 2: Connect the Integration in Zluri

1. Log in to the Zluri Admin Console.
2. Navigate to Sources → Integrations → Browse Catalog.
3. Search for Google Workspace (Service Account).
4. Click Connect Integration (or Connect another instance if already connected).
5. Upload the downloaded JSON key file.
6. Enter your Google Workspace domain (tenant).
7. Click Connect.

Step 3: Review and Add Scopes in Zluri

1. Review the required scopes presented by Zluri.
2. Add additional scopes if required for your use case.
3. Choose an authorization method:
   • Self-Authorization: Proceed directly to the next step.
   • Co-worker Authorization: Enter co-worker's details and share the unique Connect Code.

Step 4: Authorize the Connection

1. Enter the email address of the Google Workspace Admin used in domain-wide delegation.
2. Confirm the connection and authorize access through the Zluri interface.

Once authorized, Zluri will begin syncing user and domain-level data from Google Workspace.

Troubleshooting

Connection Fails?

• Double-check the Client ID used in domain-wide delegation.
• Verify that the correct scopes were added.
• Ensure the service account has the necessary permissions.
• Ensure that the JSON key format is valid and correctly uploaded.
• Review organization policies if key creation fails.