Skip to main content

Google Workspace Sync via LDAP

Sync employees and groups from Google Workspace into revel8 with Google's Secure LDAP service.

ℹ️ Info
Part of the Getting Started guide, Step 1. Integrate employee data.

Sync employees and groups from Google Workspace into revel8 through Google's Secure LDAP service. Once connected, revel8 syncs again automatically once a day, so joiners and leavers are picked up without re-uploading anything.

Before you begin

Have these ready:

  • A Google Workspace admin account, in an edition that includes Secure LDAP.

  • Admin access to revel8.

1. Add an LDAP client in Google Admin

  1. In the Google Admin console, open Apps → LDAP.

    The Apps menu in the Google Admin console

    The LDAP entry under Apps in the Google Admin console

  2. Click Add client.

    The LDAP page in Google Admin with the Add client button

  3. Enter a client name, for example revel8, and click Continue.

    The client name step when adding an LDAP client in Google Admin

2. Set the access permissions

  1. Set Verify user credentials to No access. revel8 only reads your directory.

  2. Under Read user information, choose which users revel8 may read: your entire domain or selected organizational units.

  3. Switch on Read group information.

The access permissions step of a Google Admin LDAP client

3. Download the certificate and turn the client on

  1. Download the certificate Google generates for the client. Keep the ZIP file as it is; revel8 reads the certificate and key from the ZIP itself.

    The certificate download step of a Google Admin LDAP client

  2. In the client's details, set Service status to ON. Google creates LDAP clients switched off, and revel8 cannot connect until you turn it on.

4. Configure LDAP in revel8

  1. In revel8, open Settings → Employee Sync (in Integrations) and select the LDAP tab.

  2. On the LDAP configuration card, fill in:

    • Base DN #1: your domain in LDAP format. For example.com, enter dc=example,dc=com.

    • Group (optional): leave empty to sync everyone under the Base DN, or enter a Google group name to sync only its members.

    • LDAP URL: ldaps://ldap.google.com:636

  3. To sync another domain or group, click + and add a second Base DN.

  4. Click Upload configuration.

5. Upload the certificate

Under LDAP file, click Upload file and select the ZIP from step 3. The upload starts the first import.

Once the import finishes, the tab shows LDAP configured, with the number of employees imported and disabled. Employees who are no longer in your directory are disabled rather than deleted.

Check that it worked

Open Organization → Employees. Your Google Workspace users appear under Employees, and their groups under Groups.

To sync at once instead of waiting for the daily sync, open the LDAP tab again and click Synchronize with LDAP. Edit configuration changes the Base DN or URL later.

Did this answer your question?

Related Articles