Google Workspace (G Suite) Password Sync

Enable Google Workspace-Active Directory password sync

Managing separate passwords for Active Directory and Google Workspace often leads to credential overload, higher reset requests, and frustrated users. Active Directory password sync solves this by automatically updating Google account passwords whenever users change their AD credentials. This real-time sync lets employees access Gmail, Drive, Classroom, and other G Suite apps with the same AD password—no duplicate resets or manual admin intervention required. With ADSelfService Plus Password Synchronization, organizations gain a seamless, policy-driven Google AD password sync experience that's secure, automated, and easy to administer.

How ADSelfService Plus integrates Active Directory and Google Workspace

ManageEngine ADSelfService Plus serves as a secure bridge between Active Directory and Google Workspace during password sync. Here's how the password sync process operates:

• A user forgets their Active Directory password.
• They access the ADSelfService Plus self-service password reset portal and change their password.
• The change is updated in real time in Active Directory.
• The updated password is securely transmitted to Google Workspace.
• The users can now sign in to Google Workspace services using their new AD password—no extra steps, no mismatches.

This integration ensures seamless Google-Active Directory sync without scripts, or Google Cloud Directory Sync limitations.

How to integrate Google Workspace with Active Directory for password sync

Before configuring Google Workspace password sync in ADSelfService Plus, admins must enable API access in Google Workspace for ADSelfService Plus. After API access is configured:

1. Log into ADSelfService Plus admin console with admin credentials.
2. Navigate to Configuration → Self-Service → Password Sync/ Single Sign On.
3. Select the G-Suite application.
4. Enter the Application Name and Description.
5. Enter the name of your Google Workspace domain.
6. Assign Policies for which password sync need to be enabled.
7. Select Enable Password Sync.
8. Enter the User Name of the Google Workspace admin account.
9. Enter the Service Account Email which was created in the when creating the API, from Google Workspace.
10. Select the relevant P12 Key File of Google Workspace admin account.
11. Add the application.

This setup enables continuous, secure Google Workspace password sync across all connected users.

Benefits of G Suite password sync with Active Directory

Stronger password policies:

Admins can enforce granular, custom password policies to ensure Google Workspace Active Directory users follow secure, compliant password standards.

Reduced password fatigue:

Users log in to Google apps with their AD password, eliminating repetitive resets and reducing cognitive load.

Seamless self-service password reset:

Employees can reset or change their AD passwords through a web-based portal to sync updates instantly to Google Workspace.

Selective password sync:

Users can choose which applications will require you to sync passwords, ensuring controlled and secure identities.

Improved compliance and audit readiness:

Centralized tracking of password changes and sync events help meet internal security mandates and external compliance requirements.

Conditional access control:

Admins can apply adaptive MFA policies before allowing users to sync or use their Google Workspace accounts.

Enterprise apps supported by ADSelfService Plus for password sync

ADSelfService Plus ensures synchronized access to all major Google services including Gmail, Google Drive, Google Meet, and Google Docs via Google apps password sync. Other enterprise applications supported for password sync include:

• AD LDS
• HP UX Directory Server
• IBM AS400
• Microsoft 365/Entra ID
• Salesforce
• SAP NetWeaver