Google Workspace Integration

Quantem’s integration with Google Workspace (G Suite) simplifies the enrollment of your devices securely through G Suite authentication and the device enrollment in the Android Enterprise program.  The integration will sync the user and group of your organization’s G Suite account to Quantem and automatic creation of user accounts. 

The following steps needs to be done to complete the Google workspace integration.

Create service account

Your organization needs to have a service account with Google to integrate with G Suite. Quantem uses this service account to push the configurations to the device.

1. Using the G Suite admin credential, log in to Google Cloud Console.

2. Click on Create Project.

3. Create a New Project by providing the following details.

• Project Name: Provide a suitable project name and a corresponding project ID will be generated.

4. From the Navigation Menu on the left pane, select APIs and Services > Credentials.

5. Click on Create Credentials and from the drop-down list that appears select Service account.

6. Select New service account and provide the following details.

• Service account name: Provide a suitable name for the service account.
• Service account ID: An account ID will be automatically generated. If required, you can edit it.
• Service account description: Provide a suitable description for your service account.
• Click on Create and Continue.

7. Click Done.

8. Click on the email address corresponding to the newly created service account.

9. Select the Advanced settings dropdown and copy the generated Client ID.

10. At the top, navigate to Keys. Click on Add Key > Create new key and choose the key type as JSON. Click on Create.

11. A JSON key will be downloaded. This key is later uploaded on to the Quantem server.

12. Go back to APIs & Services interface from the Navigation menu. Select Enabled APIs & Services and click on +ENABLE APIS AND SERVICES.

13. In the search box that appears, type Admin SDK API and select the same from the search results.

14. Click on Enable to enable Admin SDK API.

Manage API client access for Quantem

This process provides the Quantem with a specific API access to apply configurations to the managed devices. Ensure to Enable API access in the Admin console.

1. Using your G Suite Admin credentials, log in to Google Admin Console and click on Security.

2. From API Controls, click on MANAGE DOMAIN WIDE DELEGATION under Domain wide delegation, and click on +Add new.

3. Authorize the API clients by providing the following details.

• Client ID: Copy the unique ID from the downloaded JSON file or from the Google Cloud console.
• OAuth scopes: Copy and paste the link
  • https://www.googleapis.com/auth/admin.directory.user – To sync individual users.
  • https://www.googleapis.com/auth/admin.directory.group – To sync user groups.
  • https://www.googleapis.com/auth/admin.directory.domain – To fetch the domain.
• Click on AUTHORIZE.

Integration of G Suite with Quantem server

1. Login to your Quantem admin portal.

2. Navigate to Integration > Google workspace > Add and configure. A screen as shown below will be displayed.

3. You will have the following options to be configured.

• Admin Email: Enter the G Suite admin email address of the domain that you want to synchronize with Quantem.
• Key (json): Upload the JSON key previously downloaded.

4. Click on Next to configure G Suite.

5. With the Scheduled Scan feature, you can set a specific time on a certain day(s) when the G Suite sync is to be initiated. Either choose Daily or Weekly options from the Time settings.

• If Daily is chosen, enter the time in 24-hour format in the fields corresponding to the Initiate sync at option. It will initiate the G Suite sync at the specified time every day.
• If the Weekly option is selected, an additional option to select days will be displayed below the Initiate sync at option. It will initiate the G Suite sync at the specified time on the specified days.

6. Click on the Save button to save the configuration.