Get started with automated user provisioning

Google supports automated user provisioning for many popular cloud applications. With automated user provisioning, you can automatically save changes to user identities in the Google Admin console. Once auto-provisioning is enabled for a third-party application, you can add, modify, or delete a user in the Admin console and that user's info will be added, modified, or deleted from the third-party application as well. Users are synced every few hours.

Automated user provisioning operates on active, suspended, or deleted users only. It doesn't include archived users.

Note: Business Starter and Frontline Starter customers can configure up to 3 apps for automated user provisioning. The Business Standard, Business Plus, Frontline Standard, Frontline Plus, and Enterprise editions can configure up to 100 apps.

Before you begin

  1. Check the Pre-integrated SAML apps catalog to see if your app is supported for pre-integrated single sign-on (SSO).
  2. Check the Apps that support automated provisioning list to see whether your app is supported or needs a custom setup.
  3. Follow the steps in the appropriate section later on this page.

Set up pre-integrated SAML apps that support automated user provisioning

  1. Set up SSO, using Google as your IdP, for any of our supported apps.
    Find steps for your app in our Pre-integrated SAML apps catalog.
  2. Set up auto-provisioning for the app.
    Find steps for your app in Apps that support automated provisioning.

Set up pre-integrated SAML apps that don't support automated user provisioning

  1. Set up SSO, using Google as your IdP, for any of our supported apps.
    Find steps for your app in our Pre-integrated SAML apps catalog.
  2. Set up automated user provisioning with custom SCIM profiles.

Set up unsupported SAML apps

Follow these steps to set up automatic user provisioning for apps that aren't included in either the pre-integrated SAML apps catalog or the list of apps that support automatic user provisioning.

  1. Set up SAML-based SSO with a custom app that is not in the pre-integrated catalog.
    Follow the steps at Set up your own custom SAML app.
  2. Set up automated user provisioning with custom SCIM profiles.