[{"data":1,"prerenderedAt":899},["ShallowReactive",2],{"navigation_docs_en":3,"-en-sign-in-and-directories-google-workspace":427,"-en-sign-in-and-directories-google-workspace-surround":894},[4,31,117,188,238,271,310,369,378],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":30},"Getting started","i-hugeicons-rocket-01","\u002Fen\u002Fgetting-started","en\u002F01.getting-started",[10,15,20,25],{"title":11,"path":12,"stem":13,"icon":14},"What is DDM?","\u002Fen\u002Fgetting-started\u002Fwhat-is-ddm","en\u002F01.getting-started\u002F01.what-is-ddm","i-hugeicons-information-circle",{"title":16,"path":17,"stem":18,"icon":19},"Account and sign-in","\u002Fen\u002Fgetting-started\u002Fsign-in","en\u002F01.getting-started\u002F02.sign-in","i-hugeicons-key-01",{"title":21,"path":22,"stem":23,"icon":24},"AI in DDM","\u002Fen\u002Fgetting-started\u002Fai-in-ddm","en\u002F01.getting-started\u002F03.ai-in-ddm","i-hugeicons-ai-magic",{"title":26,"path":27,"stem":28,"icon":29},"System status","\u002Fen\u002Fgetting-started\u002Fsystem-status","en\u002F01.getting-started\u002F04.system-status","i-hugeicons-activity-03",false,{"title":32,"icon":33,"path":34,"stem":35,"children":36,"page":30},"CMS","i-hugeicons-dashboard-square-01","\u002Fen\u002Fcms","en\u002F02.cms",[37,42,47,52,57,62,67,72,77,82,87,92,97,102,107,112],{"title":38,"path":39,"stem":40,"icon":41},"The CMS at a glance","\u002Fen\u002Fcms\u002Foverview","en\u002F02.cms\u002F01.overview","i-hugeicons-compass-01",{"title":43,"path":44,"stem":45,"icon":46},"Uploading documents","\u002Fen\u002Fcms\u002Fupload","en\u002F02.cms\u002F02.upload","i-hugeicons-upload-01",{"title":48,"path":49,"stem":50,"icon":51},"Categories","\u002Fen\u002Fcms\u002Fcategories","en\u002F02.cms\u002F03.categories","i-hugeicons-folder-tree",{"title":53,"path":54,"stem":55,"icon":56},"Editing documents","\u002Fen\u002Fcms\u002Fdocuments","en\u002F02.cms\u002F04.documents","i-hugeicons-file-edit",{"title":58,"path":59,"stem":60,"icon":61},"Searching and filtering","\u002Fen\u002Fcms\u002Fsearch-and-filters","en\u002F02.cms\u002F05.search-and-filters","i-hugeicons-search-01",{"title":63,"path":64,"stem":65,"icon":66},"Groups and permissions","\u002Fen\u002Fcms\u002Fgroups-and-permissions","en\u002F02.cms\u002F06.groups-and-permissions","i-hugeicons-user-multiple",{"title":68,"path":69,"stem":70,"icon":71},"Users","\u002Fen\u002Fcms\u002Fusers","en\u002F02.cms\u002F07.users","i-hugeicons-user-add-01",{"title":73,"path":74,"stem":75,"icon":76},"Approvals","\u002Fen\u002Fcms\u002Fapprovals","en\u002F02.cms\u002F08.approvals","i-hugeicons-checkmark-badge-01",{"title":78,"path":79,"stem":80,"icon":81},"Markets and translations","\u002Fen\u002Fcms\u002Fmarkets-and-translations","en\u002F02.cms\u002F09.markets-and-translations","i-hugeicons-globe-02",{"title":83,"path":84,"stem":85,"icon":86},"Note templates","\u002Fen\u002Fcms\u002Fnote-templates","en\u002F02.cms\u002F10.note-templates","i-hugeicons-layout-01",{"title":88,"path":89,"stem":90,"icon":91},"Usage and audit log","\u002Fen\u002Fcms\u002Fusage-and-audit","en\u002F02.cms\u002F11.usage-and-audit","i-hugeicons-chart-column",{"title":93,"path":94,"stem":95,"icon":96},"AI assistant","\u002Fen\u002Fcms\u002Fassistant","en\u002F02.cms\u002F12.assistant","i-hugeicons-sparkles",{"title":98,"path":99,"stem":100,"icon":101},"Settings","\u002Fen\u002Fcms\u002Fsettings","en\u002F02.cms\u002F13.settings","i-hugeicons-settings-02",{"title":103,"path":104,"stem":105,"icon":106},"Plans","\u002Fen\u002Fcms\u002Fplans","en\u002F02.cms\u002F14.plans","i-hugeicons-package",{"title":108,"path":109,"stem":110,"icon":111},"Feature requests","\u002Fen\u002Fcms\u002Ffeature-requests","en\u002F02.cms\u002F15.feature-requests","i-hugeicons-idea-01",{"title":113,"path":114,"stem":115,"icon":116},"Report a bug","\u002Fen\u002Fcms\u002Fbug-reports","en\u002F02.cms\u002F16.bug-reports","i-hugeicons-bug-01",{"title":118,"icon":119,"path":120,"stem":121,"children":122,"page":30},"App","i-hugeicons-smart-phone-01","\u002Fen\u002Fapp","en\u002F03.app",[123,128,133,138,143,147,152,157,162,167,170,173,176,179,184],{"title":124,"path":125,"stem":126,"icon":127},"Signing in and finding your way","\u002Fen\u002Fapp\u002Foverview","en\u002F03.app\u002F01.overview","i-hugeicons-login-03",{"title":129,"path":130,"stem":131,"icon":132},"Tabs and split view","\u002Fen\u002Fapp\u002Ftabs","en\u002F03.app\u002F02.tabs","i-hugeicons-layout-2-column",{"title":134,"path":135,"stem":136,"icon":137},"Finding and reading documents","\u002Fen\u002Fapp\u002Fdocuments","en\u002F03.app\u002F03.documents","i-hugeicons-file-01",{"title":139,"path":140,"stem":141,"icon":142},"Favorites","\u002Fen\u002Fapp\u002Ffavorites","en\u002F03.app\u002F04.favorites","i-hugeicons-favourite",{"title":144,"path":145,"stem":146,"icon":61},"Searching","\u002Fen\u002Fapp\u002Fsearch","en\u002F03.app\u002F05.search",{"title":148,"path":149,"stem":150,"icon":151},"Notes","\u002Fen\u002Fapp\u002Fnotes","en\u002F03.app\u002F06.notes","i-hugeicons-note-edit",{"title":153,"path":154,"stem":155,"icon":156},"Calendar and appointments","\u002Fen\u002Fapp\u002Fcalendar","en\u002F03.app\u002F07.calendar","i-hugeicons-calendar-03",{"title":158,"path":159,"stem":160,"icon":161},"Sending to customers","\u002Fen\u002Fapp\u002Foutbox","en\u002F03.app\u002F08.outbox","i-hugeicons-sent",{"title":163,"path":164,"stem":165,"icon":166},"Working offline","\u002Fen\u002Fapp\u002Foffline","en\u002F03.app\u002F09.offline","i-hugeicons-wifi-off-01",{"title":93,"path":168,"stem":169,"icon":96},"\u002Fen\u002Fapp\u002Fassistant","en\u002F03.app\u002F10.assistant",{"title":98,"path":171,"stem":172,"icon":101},"\u002Fen\u002Fapp\u002Fsettings","en\u002F03.app\u002F11.settings",{"title":108,"path":174,"stem":175,"icon":111},"\u002Fen\u002Fapp\u002Ffeature-requests","en\u002F03.app\u002F12.feature-requests",{"title":113,"path":177,"stem":178,"icon":116},"\u002Fen\u002Fapp\u002Fbug-reports","en\u002F03.app\u002F13.bug-reports",{"title":180,"path":181,"stem":182,"icon":183},"Desktop app","\u002Fen\u002Fapp\u002Fdesktop-app","en\u002F03.app\u002F14.desktop-app","i-hugeicons-computer",{"title":185,"path":186,"stem":187,"icon":119},"Mobile app","\u002Fen\u002Fapp\u002Fmobile-app","en\u002F03.app\u002F15.mobile-app",{"title":189,"icon":190,"path":191,"stem":192,"children":193,"page":30},"Sign-in & directories","i-hugeicons-security-check","\u002Fen\u002Fsign-in-and-directories","en\u002F04.sign-in-and-directories",[194,198,202,207,212,217,222,226,230,234],{"title":195,"path":196,"stem":197,"icon":19},"Sign-in methods","\u002Fen\u002Fsign-in-and-directories\u002Fsign-in-methods","en\u002F04.sign-in-and-directories\u002F01.sign-in-methods",{"title":199,"path":200,"stem":201,"icon":190},"Single sign-on","\u002Fen\u002Fsign-in-and-directories\u002Fsingle-sign-on","en\u002F04.sign-in-and-directories\u002F02.single-sign-on",{"title":203,"path":204,"stem":205,"icon":206},"Directory services (LDAP)","\u002Fen\u002Fsign-in-and-directories\u002Fdirectory-services","en\u002F04.sign-in-and-directories\u002F03.directory-services","i-hugeicons-hierarchy",{"title":208,"path":209,"stem":210,"icon":211},"Synchronisation and sign-in","\u002Fen\u002Fsign-in-and-directories\u002Fdirectory-sync","en\u002F04.sign-in-and-directories\u002F04.directory-sync","i-hugeicons-refresh",{"title":213,"path":214,"stem":215,"icon":216},"Microsoft Entra ID","\u002Fen\u002Fsign-in-and-directories\u002Fmicrosoft-entra-id","en\u002F04.sign-in-and-directories\u002F05.microsoft-entra-id","i-hugeicons-building-03",{"title":218,"path":219,"stem":220,"icon":221},"Okta","\u002Fen\u002Fsign-in-and-directories\u002Fokta","en\u002F04.sign-in-and-directories\u002F06.okta","i-hugeicons-finger-print",{"title":223,"path":224,"stem":225,"icon":81},"Google Workspace","\u002Fen\u002Fsign-in-and-directories\u002Fgoogle-workspace","en\u002F04.sign-in-and-directories\u002F07.google-workspace",{"title":227,"path":228,"stem":229,"icon":119},"Two-factor authentication","\u002Fen\u002Fsign-in-and-directories\u002Ftwo-factor-authentication","en\u002F04.sign-in-and-directories\u002F08.two-factor-authentication",{"title":231,"path":232,"stem":233,"icon":221},"Passkeys","\u002Fen\u002Fsign-in-and-directories\u002Fpasskeys","en\u002F04.sign-in-and-directories\u002F09.passkeys",{"title":235,"path":236,"stem":237,"icon":156},"Calendar access","\u002Fen\u002Fsign-in-and-directories\u002Fcalendar-access","en\u002F04.sign-in-and-directories\u002F10.calendar-access",{"title":239,"icon":240,"path":241,"stem":242,"children":243,"page":30},"MCP server","i-hugeicons-ai-network","\u002Fen\u002Fmcp-server","en\u002F05.mcp-server",[244,248,253,257,262,266],{"title":245,"path":246,"stem":247,"icon":240},"Overview","\u002Fen\u002Fmcp-server\u002Foverview","en\u002F05.mcp-server\u002F01.overview",{"title":249,"path":250,"stem":251,"icon":252},"Setup","\u002Fen\u002Fmcp-server\u002Fsetup","en\u002F05.mcp-server\u002F02.setup","i-hugeicons-plug-socket",{"title":254,"path":255,"stem":256,"icon":111},"What you can do with it","\u002Fen\u002Fmcp-server\u002Fuse-cases","en\u002F05.mcp-server\u002F03.use-cases",{"title":258,"path":259,"stem":260,"icon":261},"Tools","\u002Fen\u002Fmcp-server\u002Ftools","en\u002F05.mcp-server\u002F04.tools","i-hugeicons-wrench-01",{"title":263,"path":264,"stem":265,"icon":76},"Approving changes","\u002Fen\u002Fmcp-server\u002Fapproving-changes","en\u002F05.mcp-server\u002F05.approving-changes",{"title":267,"path":268,"stem":269,"icon":270},"Administration & security","\u002Fen\u002Fmcp-server\u002Fadmin-and-security","en\u002F05.mcp-server\u002F06.admin-and-security","i-hugeicons-shield-key",{"title":272,"icon":273,"path":274,"stem":275,"children":276,"page":30},"External sources","i-hugeicons-database-sync","\u002Fen\u002Fexternal-sources","en\u002F06.external-sources",[277,280,285,290,295,300,305],{"title":245,"path":278,"stem":279,"icon":273},"\u002Fen\u002Fexternal-sources\u002Foverview","en\u002F06.external-sources\u002F01.overview",{"title":281,"path":282,"stem":283,"icon":284},"SharePoint","\u002Fen\u002Fexternal-sources\u002Fsharepoint","en\u002F06.external-sources\u002F02.sharepoint","i-hugeicons-microsoft",{"title":286,"path":287,"stem":288,"icon":289},"OneDrive","\u002Fen\u002Fexternal-sources\u002Fonedrive","en\u002F06.external-sources\u002F03.onedrive","i-hugeicons-folder-cloud",{"title":291,"path":292,"stem":293,"icon":294},"Google Drive","\u002Fen\u002Fexternal-sources\u002Fgoogle-drive","en\u002F06.external-sources\u002F04.google-drive","i-hugeicons-google-drive",{"title":296,"path":297,"stem":298,"icon":299},"FTP \u002F SFTP","\u002Fen\u002Fexternal-sources\u002Fftp-sftp","en\u002F06.external-sources\u002F05.ftp-sftp","i-hugeicons-server-stack-01",{"title":301,"path":302,"stem":303,"icon":304},"REST interface","\u002Fen\u002Fexternal-sources\u002Frest","en\u002F06.external-sources\u002F06.rest","i-hugeicons-api",{"title":306,"path":307,"stem":308,"icon":309},"SOAP interface","\u002Fen\u002Fexternal-sources\u002Fsoap","en\u002F06.external-sources\u002F07.soap","i-hugeicons-source-code",{"title":311,"icon":304,"path":312,"stem":313,"children":314,"page":30},"Integration API","\u002Fen\u002Fintegration-api","en\u002F07.integration-api",[315,318,322,327,332,337,341,346,350,354,359,364],{"title":245,"path":316,"stem":317,"icon":14},"\u002Fen\u002Fintegration-api\u002Foverview","en\u002F07.integration-api\u002F01.overview",{"title":319,"path":320,"stem":321,"icon":19},"Authentication","\u002Fen\u002Fintegration-api\u002Fauthentication","en\u002F07.integration-api\u002F02.authentication",{"title":323,"path":324,"stem":325,"icon":326},"Conventions","\u002Fen\u002Fintegration-api\u002Fconventions","en\u002F07.integration-api\u002F03.conventions","i-hugeicons-book-open-01",{"title":328,"path":329,"stem":330,"icon":331},"Pushing documents","\u002Fen\u002Fintegration-api\u002Fpushing-documents","en\u002F07.integration-api\u002F04.pushing-documents","i-hugeicons-upload-02",{"title":333,"path":334,"stem":335,"icon":336},"Consuming content","\u002Fen\u002Fintegration-api\u002Fconsuming-content","en\u002F07.integration-api\u002F05.consuming-content","i-hugeicons-download-02",{"title":338,"path":339,"stem":340,"icon":137},"Reference: documents","\u002Fen\u002Fintegration-api\u002Freference-documents","en\u002F07.integration-api\u002F06.reference-documents",{"title":342,"path":343,"stem":344,"icon":345},"Reference: categories, tags, markets","\u002Fen\u002Fintegration-api\u002Freference-categories-tags","en\u002F07.integration-api\u002F07.reference-categories-tags","i-hugeicons-folder-01",{"title":347,"path":348,"stem":349,"icon":211},"Reference: sync manifest","\u002Fen\u002Fintegration-api\u002Freference-sync","en\u002F07.integration-api\u002F08.reference-sync",{"title":351,"path":352,"stem":353,"icon":309},"OpenAPI","\u002Fen\u002Fintegration-api\u002Fopenapi","en\u002F07.integration-api\u002F09.openapi",{"title":355,"path":356,"stem":357,"icon":358},"Changelog","\u002Fen\u002Fintegration-api\u002Fchangelog","en\u002F07.integration-api\u002F10.changelog","i-hugeicons-time-schedule",{"title":360,"path":361,"stem":362,"icon":363},"Reference: groups, markets, access","\u002Fen\u002Fintegration-api\u002Freference-groups-access","en\u002F07.integration-api\u002F11.reference-groups-access","i-hugeicons-user-lock-01",{"title":365,"path":366,"stem":367,"icon":368},"Moving from CMWS","\u002Fen\u002Fintegration-api\u002Fcmws","en\u002F07.integration-api\u002F12.cmws","i-hugeicons-arrow-reload-horizontal",{"title":370,"icon":371,"path":372,"stem":373,"children":374,"page":30},"What's new","i-hugeicons-gift","\u002Fen\u002Fwhats-new","en\u002F08.whats-new",[375],{"title":355,"path":376,"stem":377,"icon":358},"\u002Fen\u002Fwhats-new\u002Fchangelog","en\u002F08.whats-new\u002F01.changelog",{"title":379,"icon":299,"path":380,"stem":381,"children":382,"page":30},"Self-hosting","\u002Fen\u002Fself-hosting","en\u002F09.self-hosting",[383,386,390,395,399,404,408,413,418,422],{"title":245,"path":384,"stem":385,"icon":14},"\u002Fen\u002Fself-hosting\u002Foverview","en\u002F09.self-hosting\u002F01.overview",{"title":387,"path":388,"stem":389,"icon":106},"Docker Compose","\u002Fen\u002Fself-hosting\u002Fdocker-compose","en\u002F09.self-hosting\u002F02.docker-compose",{"title":391,"path":392,"stem":393,"icon":394},"Kubernetes","\u002Fen\u002Fself-hosting\u002Fkubernetes","en\u002F09.self-hosting\u002F03.kubernetes","i-hugeicons-cloud",{"title":396,"path":397,"stem":398,"icon":101},"Configuration","\u002Fen\u002Fself-hosting\u002Fconfiguration","en\u002F09.self-hosting\u002F04.configuration",{"title":400,"path":401,"stem":402,"icon":403},"Licence","\u002Fen\u002Fself-hosting\u002Flicence","en\u002F09.self-hosting\u002F05.licence","i-hugeicons-license",{"title":405,"path":406,"stem":407,"icon":211},"Updates","\u002Fen\u002Fself-hosting\u002Fupdates","en\u002F09.self-hosting\u002F06.updates",{"title":409,"path":410,"stem":411,"icon":412},"Postgres","\u002Fen\u002Fself-hosting\u002Fpostgres","en\u002F09.self-hosting\u002F07.postgres","i-hugeicons-database",{"title":414,"path":415,"stem":416,"icon":417},"Backups","\u002Fen\u002Fself-hosting\u002Fbackups","en\u002F09.self-hosting\u002F08.backups","i-hugeicons-database-restore",{"title":419,"path":420,"stem":421,"icon":261},"Troubleshooting","\u002Fen\u002Fself-hosting\u002Ftroubleshooting","en\u002F09.self-hosting\u002F09.troubleshooting",{"title":423,"path":424,"stem":425,"icon":426},"Firewall","\u002Fen\u002Fself-hosting\u002Ffirewall","en\u002F09.self-hosting\u002F10.firewall","i-hugeicons-firewall",{"id":428,"title":223,"body":429,"description":887,"extension":888,"links":889,"meta":890,"navigation":891,"path":224,"seo":892,"stem":225,"__hash__":893},"docs_en\u002Fen\u002F04.sign-in-and-directories\u002F07.google-workspace.md",{"type":430,"value":431,"toc":872},"minimark",[432,443,448,459,539,543,621,639,643,646,650,794,798,847,851],[433,434,435,436,439,440,442],"p",{},"With Google Workspace, your people sign in with the account they use for Gmail and Drive. You create an OAuth client in your Google Cloud project and enter it in DDM under ",[437,438,98],"strong",{}," › ",[437,441,199],{},".",[444,445,447],"h2",{"id":446},"_1-create-the-oauth-client","1. Create the OAuth client",[433,449,450,451,458],{},"In the ",[452,453,457],"a",{"href":454,"rel":455},"https:\u002F\u002Fconsole.cloud.google.com",[456],"nofollow","Google Cloud console",", in a project of your Google Workspace organisation:",[460,461,463,468,492,496,525,529],"steps",{"level":462},"3",[464,465,467],"h3",{"id":466},"consent-screen","Consent screen",[433,469,470,471,474,475,478,479,483,484,487,488,491],{},"Under ",[437,472,473],{},"Google Auth Platform"," (formerly ",[437,476,477],{},"OAuth consent screen","), enter the app name ",[480,481,482],"code",{},"DDM"," and a support address, and choose ",[437,485,486],{},"Internal"," as the ",[437,489,490],{},"Audience"," – then only accounts of your own Workspace can sign in, and Google does not need to review the app.",[464,493,495],{"id":494},"client","Client",[433,497,470,498,439,501,504,505,508,509,512,513,516,517,439,519,521,522,442],{},[437,499,500],{},"Clients",[437,502,503],{},"Create client",", choose ",[437,506,507],{},"Web application"," and add as ",[437,510,511],{},"Authorized redirect URI"," the ",[437,514,515],{},"Redirect URI"," from DDM, ",[437,518,98],{},[437,520,199],{}," – e.g. ",[480,523,524],{},"https:\u002F\u002Fcms.documentdistributionmanager.com\u002Fapi\u002Fauth\u002Fsso\u002Fcallback",[464,526,528],{"id":527},"copy-the-credentials","Copy the credentials",[433,530,531,532,535,536,442],{},"Copy the ",[437,533,534],{},"Client ID"," and the ",[437,537,538],{},"Client secret",[444,540,542],{"id":541},"_2-enter-it-in-ddm","2. Enter it in DDM",[544,545,546,559],"table",{},[547,548,549],"thead",{},[550,551,552,556],"tr",{},[553,554,555],"th",{},"Field",[553,557,558],{},"Value",[560,561,562,577,589,600,609],"tbody",{},[550,563,564,570],{},[565,566,567],"td",{},[437,568,569],{},"Button label",[565,571,572,573,576],{},"e.g. ",[480,574,575],{},"Google"," or your company's name",[550,578,579,584],{},[565,580,581],{},[437,582,583],{},"Issuer",[565,585,586],{},[480,587,588],{},"https:\u002F\u002Faccounts.google.com",[550,590,591,595],{},[565,592,593],{},[437,594,534],{},[565,596,597],{},[480,598,599],{},"….apps.googleusercontent.com",[550,601,602,606],{},[565,603,604],{},[437,605,538],{},[565,607,608],{},"from Google",[550,610,611,616],{},[565,612,613],{},[437,614,615],{},"E-mail claim",[565,617,618],{},[480,619,620],{},"email",[433,622,623,624,627,628,631,632,635,636,442],{},"Click ",[437,625,626],{},"Save",", then ",[437,629,630],{},"Test connection",", and switch on ",[437,633,634],{},"Single sign-on active"," – see ",[452,637,199],{"href":638},"\u002Fen\u002Fsign-in-and-directories\u002Fsingle-sign-on#_4-switch-it-on",[444,640,642],{"id":641},"map-groups","Map groups",[433,644,645],{},"Google sends no groups by OpenID Connect. To have DDM put people into groups by their Google groups, connect Google Workspace by SAML instead – see below.",[444,647,649],{"id":648},"with-saml-instead","With SAML instead",[651,652,653,668,691,709,748,784],"ol",{},[654,655,470,656,439,658,660,661,663,664,667],"li",{},[437,657,98],{},[437,659,199],{},", add a provider with ",[437,662,223],{}," and ",[437,665,666],{},"SAML 2.0",". DDM shows three values for it.",[654,669,450,670,675,676,439,679,439,682,439,685,688,689,442],{},[452,671,674],{"href":672,"rel":673},"https:\u002F\u002Fadmin.google.com",[456],"Google Admin console",", go to ",[437,677,678],{},"Apps",[437,680,681],{},"Web and mobile apps",[437,683,684],{},"Add app",[437,686,687],{},"Add custom SAML app",", name it ",[480,690,482],{},[654,692,693,694,697,698,701,702,439,705,708],{},"On the page ",[437,695,696],{},"Google Identity Provider details",", click ",[437,699,700],{},"Download metadata"," and paste the file's content in DDM under ",[437,703,704],{},"Your provider's metadata",[437,706,707],{},"Paste metadata",". Save.",[654,710,711,712,715,716,719,720,723,724,719,727,730,731,734,735,738,739,734,742,439,745,442],{},"Back in Google, under ",[437,713,714],{},"Service provider details",", enter DDM's ",[437,717,718],{},"Reply URL (ACS URL)"," as ",[437,721,722],{},"ACS URL"," and DDM's ",[437,725,726],{},"Identifier (Entity ID)",[437,728,729],{},"Entity ID",". ",[437,732,733],{},"Name ID format",": ",[480,736,737],{},"EMAIL",", ",[437,740,741],{},"Name ID",[437,743,744],{},"Basic Information",[437,746,747],{},"Primary email",[654,749,470,750,753,754,756,757,738,759,756,762,738,765,756,768,771,772,775,776,779,780,783],{},[437,751,752],{},"Attribute mapping",", add ",[437,755,747],{}," → ",[480,758,620],{},[437,760,761],{},"First name",[480,763,764],{},"firstName",[437,766,767],{},"Last name",[480,769,770],{},"lastName",". For groups, add under ",[437,773,774],{},"Group membership"," the Google groups DDM should know and name the app attribute ",[480,777,778],{},"groups"," – enter that as the ",[437,781,782],{},"Group claim"," in DDM, and map the groups by their name.",[654,785,786,787,790,791,442],{},"Switch the app ",[437,788,789],{},"ON for everyone"," (or for an organisational unit) under ",[437,792,793],{},"User access",[444,795,797],{"id":796},"common-errors","Common errors",[544,799,800,810],{},[547,801,802],{},[550,803,804,807],{},[553,805,806],{},"Problem",[553,808,809],{},"Solution",[560,811,812,822,832],{},[550,813,814,819],{},[565,815,816],{},[480,817,818],{},"Error 400: redirect_uri_mismatch",[565,820,821],{},"The redirect URI in Google differs from the one DDM shows – copy it again.",[550,823,824,829],{},[565,825,826],{},[480,827,828],{},"Error 403: org_internal",[565,830,831],{},"The person signed in with an account outside your Workspace – e.g. a private Gmail address.",[550,833,834,839],{},[565,835,836],{},[437,837,838],{},"Your e-mail address is not on one of your organisation's confirmed domains",[565,840,841,842,439,844,442],{},"The account's address is on a domain you have not confirmed in DDM – e.g. a secondary domain of your Workspace. Confirm it under ",[437,843,98],{},[437,845,846],{},"Organisation",[444,848,850],{"id":849},"google-sign-in-for-the-whole-installation","Google sign-in for the whole installation",[433,852,853,854,857,858,738,861,738,864,867,868,871],{},"Whoever runs a DDM installation can also offer ",[437,855,856],{},"Sign in with Google Workspace"," to every organisation on it, set up on the server (",[480,859,860],{},"GOOGLE_CLIENT_ID",[480,862,863],{},"GOOGLE_CLIENT_SECRET",[480,865,866],{},"NUXT_PUBLIC_SSO_PROVIDERS=\"google\"",", redirect URI ",[480,869,870],{},"\u003CBETTER_AUTH_URL>\u002Fapi\u002Fauth\u002Fcallback\u002Fgoogle","). It does not create accounts and is the same for everybody; an organisation that wants its own client and rules uses single sign-on as described above.",{"title":873,"searchDepth":874,"depth":874,"links":875},"",2,[876,882,883,884,885,886],{"id":446,"depth":874,"text":447,"children":877},[878,880,881],{"id":466,"depth":879,"text":467},3,{"id":494,"depth":879,"text":495},{"id":527,"depth":879,"text":528},{"id":541,"depth":874,"text":542},{"id":641,"depth":874,"text":642},{"id":648,"depth":874,"text":649},{"id":796,"depth":874,"text":797},{"id":849,"depth":874,"text":850},"Connect your organisation's Google Workspace – create an OAuth client and enter it in DDM.","md",null,{},{"icon":81},{"title":223,"description":887},"z2evQwlkr2ld-LWl1sd9lMdFTUNjkBRKmS4Cr5K5IDU",[895,897],{"title":218,"path":219,"stem":220,"description":896,"icon":221,"children":-1},"Connect your organisation's Okta – create an OpenID Connect app integration and enter it in DDM.",{"title":227,"path":228,"stem":229,"description":898,"icon":119,"children":-1},"After the password, a code from an authenticator app – optional for everybody, required for your organisation if you decide so, with codes by e-mail as a fallback you can switch off.",1793617719639]