Integrate Google Workspace Identities

The Google Workspace identity service feature is an enhancement to the Cisco Security for Chromebook client. The Google Workspace identity service adds the Google Workspace Organizational Units (OUs) and Google Workspace Users to the Umbrella policy.

Table of Contents

Known Limitations

  • Google Workspace identities-based policy and enforcement is supported only on Chromebooks with Cisco Security for Chromebook client.
  • Google Organizational Unit (OU) and User information updates can take up to 60 mins to appear in the Cisco Umbrella dashboard.
  • Customers of Cisco Security for Chromebook client, who are onboarding with the Google Workspace identity service for more than 250K identities must create a support case at [email protected]. A support case is not required for existing Google Workspace users.
  • Google Workspace Groups cannot be imported to Umbrella. Only Google Workspace Users and OUs can be imported.


The Google Workspace administrator account must have full administrative privileges on the Umbrella dashboard.


You need to carry out the following steps to integrate Google Workspace Identity Service with the Cisco Security for Chromebook client:

Install the Cisco Umbrella Authorizer Application. The Cisco Umbrella Authorizer application authorizes the scopes that Umbrella needs to retrieve information from your Google Workspace account.

    1. Open your Google Workspace administration console, using your Google Workspace super administrator ID.
    2. Navigate to the Umbrella Authorizer application in Google Workspace Marketplace.
  1. Click Admin Install and click Continue in the dialog box that appears.
  1. Click the checkbox to agree to the Terms of Service and Privacy Policy and click Finish to complete installing the app.
  1. Once it is installed, you can view the app in the Domain Installed Apps tab of the Google Workspace Marketplace.
  1. Go to the Umbrella Dashboard and navigate to Deployments > Core Identities > Chromebook Users. Click Configure.
  1. Click Configure and, in the Google Workspace Integration section, sign-in with a Google Super Admin ID.

Once you sign-in with a Google Super Admin ID, the Google Workspace Identities are synced with Umbrella. A sync could take up to 60 minutes. After the sync, the Umbrella Policies page displays the Google Workspace identities, organizational units, and users.

Google Workspace Identity Service > Integrate Google Workspace Identities > Deploy the Chromebook client