Configure ScreenSteps user provisioning

You can set up automated user provisioning (autoprovisioning) so that any changes you make to user accounts in Google Workspace are automatically synced with this third-party app.

Automated user provisioning operates only on active, suspended, or deleted users. It doesn't include archived users.

Before you begin

Before you can set up automated user provisioning, you need to set up SSO for ScreenSteps. For the steps, go to ScreenSteps cloud app.

Set up automated user provisioning

Get access token for app

  1. Go to the ScreenSteps sign-in page and sign in with your ScreenSteps administrator account.
  2. Click User Settings and thenAPI Token and thenCreate API Token.
  3. Copy and save the Access token.

Set up autoprovisioning for app

You must be signed in as a super administrator for this task.

  1. In the Google Admin console, go to Menu and then Apps and thenWeb and mobile apps.

    You must be signed in as a super administrator for this task.

  2. Click ScreenSteps.
  3. For Autoprovisioning, click Configure autoprovisioning.
  4. For Access token, paste the access token that you copied from ScreenSteps.
  5. Click Continue.
  6. For Endpoint URL, replace {your_domain} with your ScreenSteps domain.
  7. Click Continue.

  8. For App attributes, verify that all mandatory attributes—those marked with an asterisk (*)—are mapped to Google directory attributes. If not, click the Down arrow and map them to their appropriate attribute.

  9. Click Continue.
  10. (Optional) To limit autoprovisioning to specific groups of users:
    1. For Search groups, enter one or more letters of the group name, select the group name, and choose a scope.
    2. Add any additional groups.
    3. (Optional) To remove a group, click Remove .

      If a group has users from a secondary domain or from outside of your organization, those users are not provisioned.

  11. Decide how long users have access to the app after the app is turned off for them or their Google Workspace account is suspended or deleted. You can decide to suspend and then hard delete their account in ScreenSteps. Or, just suspend or hard delete them. You can set the time frame individually for each option and choose within 24 hours or after one, 7, or 21 days.
    1. Choose options for each of these settings, as needed:
      • When an app is turned off for a user
      • When a user is suspended from Google
      • When a user is deleted from Google

      If you suspend the user account in ScreenSteps, it's marked as deactivated. If you hard delete the user account in ScreenSteps, the account is removed from the workspace. Always set more time before hard deleting a user's account.

    2. Click Finish.
  12. Turn on Autoprovisioning.
  13. Click Turn on to confirm.

Edit provisioning information

Edit user groups subject to autoprovisioning

If you turned on the app for certain organizational units, only users in the added groups who are also members of those organizational units are subject to autoprovisioning.

You must be signed in as a super administrator for this task.

  1. In the Google Admin console, go to Menu and then Apps and thenWeb and mobile apps.

    You must be signed in as a super administrator for this task.

  2. Click ScreenSteps.
  3. Click Autoprovisioning.
  4. For Provisioning scope, click Edit.

  5. For Search groups, enter one or more letters of the group name, select the group name, and choose a scope.

  6. Add any additional groups.
  7. (Optional) To remove a group, click Remove .

    If a group has users from a secondary domain or from outside of your organization, those users are not provisioned.

  8. Click Update.

Edit deprovisioning time frames

You must be signed in as a super administrator for this task.

To define how long deprovisioning actions should be delayed before taking effect:

  1. In the Google Admin console, go to Menu and then Apps and thenWeb and mobile apps.

    You must be signed in as a super administrator for this task.

  2. Click ScreenSteps.
  3. Click Autoprovisioning.
  4. For Deprovisioning, click Edit.
  5. Decide how long users have access to the app after the app is turned off for them or their Google Workspace account is suspended or deleted. You can decide to suspend and then hard delete their account in ScreenSteps. Or, just suspend or hard delete them. You can set the time frame individually for each option and choose within 24 hours or after one, 7, or 21 days. Choose options for each of these settings, as needed:
    • When an app is turned off for a user
    • When a user is suspended from Google
    • When a user is deleted from Google

    If you suspend the user account in ScreenSteps, it's marked as deactivated. If you hard delete the user account in ScreenSteps, the account is removed from the workspace. Always set more time before hard deleting a user's account.

  6. Click Update.

Turn off autoprovisioning & delete configuration information

You can turn off autoprovisioning for the app without losing configuration information. Or, you can turn off autoprovisioning and remove all configuration information.

Turn off autoprovisioning

You must be signed in as a super administrator for this task.

To turn off autoprovisioning for the app and keep the configuration information:

  1. In the Google Admin console, go to Menu and then Apps and thenWeb and mobile apps.

    You must be signed in as a super administrator for this task.

  2. Click ScreenSteps.
  3. Choose an option:
    • Turn off Autoprovisioning.
    • Click Autoprovisioning and thenStatus and thenTurn off.
  4. Click Turn off to confirm.

Turn off autoprovisioning & delete configuration information

You must be signed in as a super administrator for this task.

  1. In the Google Admin console, go to Menu and then Apps and thenWeb and mobile apps.

    You must be signed in as a super administrator for this task.

  2. Click ScreenSteps.
  3. Click Autoprovisioning.
  4. For Delete configuration, click Delete.
  5. Click Delete to turn off autoprovisioning and remove all the configuration information.
    Existing users will not be removed from ScreenSteps and can still use the app.

Review usage information

  • After you turn on autoprovisioning, you can review usage information. For details, go to Monitor automated user provisioning.
  • You can review the following usage information for the last 30 days:
Admin log event Description
Create User By Auto Provisioning Users created by autoprovisioning
Update Auto Provisioned User Users updated by autoprovisioning
Suspend Auto Provisioned User Users suspended by autoprovisioning
Unsuspend Auto Provisioned User Users reactivated by autoprovisioning
Hard Delete Auto Provisioned User Users deleted by autoprovisioning
Failures Failed requests

If autoprovisioning stops working…

Sometimes, due to account inactivity or if the admin password for ScreenSteps changes, autoprovisioning stops working. To continue syncing user accounts in Google Workspace to the app, you need to reauthorize autoprovisioning.

You must be signed in as a super administrator for this task.

  1. In the Google Admin console, go to Menu and then Apps and thenWeb and mobile apps.

    You must be signed in as a super administrator for this task.

  2. Click ScreenSteps.
  3. Click Autoprovisioning.
  4. For App authorization, click Reauthorize.
  5. For Access token, enter the Access token from ScreenSteps.
    If you need to generate another token, follow the steps in Get access token for app (earlier on this page).
  6. Click Re-authorize.

For details on other reasons why autoprovisioning might stop working, refer to the app's documentation.


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.