Google Workspace integration

Integrate Dromlik with Google Workspace to sync users from your Google directory into Dromlik as extensions and let them sign in to the Dromlik App with their Google account.

What the integration does

• Directory sync — pull users and groups from your Google Workspace domain into Dromlik and create matching extensions.
• Sign in with Google — users click "Sign in with Google" on the Dromlik App sign-in screen — no separate password.
• Automatic deprovisioning — when a user is suspended in Google Workspace, their Dromlik extension is disabled on the next sync.

Requirements

• A Google Workspace account (any edition) with a verified domain.
• Super Admin access to the Google Admin console for the initial setup.
• Administrator access to Dromlik.

Set up the integration

1. 1

   Create a Google Cloud project

   In the Google Cloud Console, create a new project named Dromlik.

2. 2

   Enable the Admin SDK API

   In your project, go to APIs & Services → Library and enable the Admin SDK API.

3. 3

   Create a service account with domain-wide delegation

   Under IAM & Admin → Service Accounts, create a service account, then create and download a JSON key. Enable domain-wide delegation and note the client ID.

4. 4

   Authorise the service account in Google Workspace

   In the Google Admin console, go to Security → Access and data control → API controls → Domain-wide delegation. Add the service account's client ID with these scopes:

   • https://www.googleapis.com/auth/admin.directory.user.readonly
   • https://www.googleapis.com/auth/admin.directory.group.readonly
5. 5

   Create an OAuth client for sign-in

   In the Cloud Console under APIs & Services → Credentials, create an OAuth 2.0 Client ID of type Web application. Add the redirect URI shown in Dromlik under Integrations → Google Workspace.

6. 6

   Connect Drömlik

   In Dromlik, go to Integrations → Google Workspace. Upload the service account JSON key, paste the OAuth client ID and secret, and enter the email of a Google Workspace admin to impersonate for the directory sync. Click Connect.

7. 7

   Choose who to sync and enable SSO

   Pick the Google Workspace groups whose members should get a Dromlik extension, then turn on Sign in with Google.

Troubleshooting

"unauthorized_client" — the service account isn't authorised for the scopes above in the Google Admin console.

"redirect_uri_mismatch" — the redirect URI in the OAuth client doesn't match the one Dromlik shows.

Only the impersonated admin appears in sync — the impersonated user needs the User Management Admin role in Google Workspace.