Manage G Suite Users
When an Okta end user is assigned to Google Apps or when their assignments are updated, admins have the option to manage all Google licenses and deprovisioning actions, centrally and granularly, within Okta. Additionally, this Okta end user's licenses can be automatically updated within their 3rd-party Google account. This is true Individually or within a group. In essence, any updates created in Okta can be subsequently pushed to Google.
Before you use this option, you must do the following:
Have Google Apps provisioning enabled in Okta.
In your Google AdminAn abbreviation of administrator. This is the individual(s) who have access to the Okta Administrator Dashboard. They control the provisioning and deprovisioning of end users, the assigning of apps, the resetting of passwords, and the overall end user experience. Only administrators have the Administration button on the upper right side of the My Applications page. console, set Auto-licensing to ON, then click Manage Licenses. See Options for License Management below for details.
Un-check Auto-assign the following license to all currently unassigned users and users subsequently created:
In Okta, select the People or GroupsGroups allow you to organize your end users and the apps they can access. Assigning apps to large sets of end users is made easier with groups.tab for the Google Apps appAn abbreviation of application. Essentially, it is a web-based site used to perform any number of specific tasks, and requires authentication from end users by signing in..
Chose a user or group, then click the right-side Edit button. The Edit User Assignment page appears.
Select true from the Manage licenses on create update drop-down menu. See Options for License Management below for details.
Click the appropriate check-boxes to assign the license(s).
Caution: Only certain groups of Google licenses can be individually selected, as some groups provide mutually exclusive options. For example: You can assign only one license selection at a time for Google Apps and Google Drive. Choosing more than one results in an error on the Tasks page, and only the first selection is honored.
Deactivating a Google Apps User
When you need to deprovision or deactivate an Okta user from Google Apps, you can do so without compromising the user's Google account. Control this element under Deactivation options on the Edit User Assignments screen.
If both boxes are left unchecked, the user is suspended in Okta and in their corresponding Google account. See details about these options below.
Deactivation options are:
Do not suspend user: Checking this box prevents the user's account from being suspended in Google after deprovisioning in Okta. The user's Google account remains active.
Remove all Google Apps licenses: Checking this box insures that, when deprovisioned, Google licenses for this user no longer exist in Okta.
Manage licenses on create and update
When Okta end usersIn Okta literature, we generally refer to "end users" as the people who have their own Okta home page (My Applications), using apps to authenticate into all of their apps. End users do not have any administrative control. When we refer to "users" we are generally referring to the individual(s) who have administrative control. are assigned, or changed in the Universal DirectoryUniversal Directory enables you to store an unlimited amount of users and attributes from applications and sources like AD or HR systems. Any type of attributes are supported including linked-objects, sensitive attributes, and pre-defines lists. All of it accessible by all apps in our OIN catalog, over LDAP or via API. Profile Editor, choosing true allows any changes in their Google license(s) to be automatically pushed to Google. Choosing false does not push any information.
We have recently updated GSuite licenses for our GSuite provisioning integration. In order to use updated licenses, you need to contact Okta Support and request that they migrate your GSuite application instance to the new profile template.
Due to some limitations, there is a slight difference in license naming, so we have provided the license mapping table below:
Note that we have plans to update these outdated names for licenses in the nearest future.
|SKU ID||Okta Name||GSuite Name|
|Google-Apps-For-Business||Google Apps for Business||G Suite Basic|
|Google-Apps-For-Postini||Google Apps for Postini||Google Apps Message Security|
|Google-Apps-Unlimited||Google Apps Unlimited||G Suite Business|
|Google-Apps-Lite||Google Apps Lite||G Suite Lite|
|1010020020||G Suite Enterprise||G Suite Enterprise|
|1010060001||Drive Enterprise||Drive Enterprise|
|Google-Drive-storage-20GB||Google Drive Storage 20GB||Google Drive storage 20 GB|
|Google-Drive-storage-50GB||Google Drive Storage 50GB||Google Drive storage 50 GB|
|Google-Drive-storage-200GB||Google Drive Storage 200GB||Google Drive storage 200 GB|
|Google-Drive-storage-400GB||Google Drive Storage 400GB||Google Drive storage 400 GB|
|Google-Drive-storage-1TB||Google Drive Storage 1TB||Google Drive storage 1 TB|
|Google-Drive-storage-2TB||Google Drive Storage 2TB||Google Drive storage 2 TB|
|Google-Drive-storage-4TB||Google Drive Storage 4TB||Google Drive storage 4 TB|
|Google-Drive-storage-8TB||Google Drive Storage 8TB||Google Drive storage 8 TB|
|Google-Drive-storage-16TB||Google Drive Storage 16TB||Google Drive storage 16 TB|
|Google-Vault||Google Vault||Google Vault|
|Google-Vault-Former-Employee||Google Vault Former Employee||Google Vault - Former Employee|
|1010010001||Cloud Identity||Cloud Identity|
|1010050001||Cloud Identity Premium||Cloud Identity Premium|
ChicletsThe "buttons" that appear on an end user's Home page and represent each application they wish to access through Okta. Clicking the button allows the end user to instantly sign in and authenticate themselves into their chosen app. This term is obsolete and has been replaced by the term "app". for apps for which users do not have a license may appear on their Okta Home page. Clicking these chiclets results in an error message.Top