This page is for Directory Sync. If you’re using Google Cloud Directory Sync (GCDS), go to GCDS. Directory Sync is currently in public beta.
Now you need to connect your external directory using Directory Sync in the Google Admin console. Later, you can add other external directories and connect to multiple directories at once.
You can set up multiple directory configurations, but they must point to separate Microsoft Active Directory (AD) or Microsoft Azure Active Directory (Azure AD) servers. You can’t point more than one directory configuration to a single external directory server.
Add an external directory
Expand section | Collapse all & go to top
Before you begin
- Make sure you meet the system requirements. For details, go to System requirements.
- Enable pop-ups originating from admin.google.com/ac/sync.
Add the directory
-
Sign in with an
administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
This action creates a service account. For more information, go to What happens when I add an external directory for the first time?
- Click Add Azure Active Directory
Continue.
- For Directory name, enter a name for your directory and, optionally, add a description.
- Click Authorize and Save.
- Enter your Microsoft credentials.
The credentials must have access to read users and groups.
- Check the Consent on behalf of your organization boxclick Accept.
- If you get a Connection successful message, click Continue.
- If you get a Connection unsuccessful message, click Retry.
- Click your newly created directory and ensure that you allowed pop-ups originating from admin.google.com/ac/sync.
- Review the reasons for failure and troubleshoot a failed connection (below on this page).
- Correct any issues and try to connect again.
Before you begin
Add the directory
-
Sign in with an
administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
This action creates a service account. For more information, go to What happens when I add an external directory for the first time?
- Click Add Active DirectoryContinue.
- For Directory name, enter a name for your directory and, optionally, add a description.
- Click Continue.
- For Project ID, enter the ID from the Google Cloud project where you created the VPC access connector.
- For VPC access connector name, enter the name of the VPC access connector that you set up in Google Cloud. Use the following format:
projects/project id/locations/VPC location/connectors/VPC connector name
To find the values for VPC location and VPC connector name, in your Google Cloud project, click VPC networkServerless VPC access and find your VPC access connector. Go to Name for the VPC connector name. Go to Region for the VPC location.
- Click Continue.
- For Active Directory server details, enter:
- Click Save and Test Connection.
This process might take up to a minute. If you close the window before the test is complete, you can check the results in the Admin audit log. If the test fails, you're prompted to re-enter your directory information.
- Click Continue or troubleshoot a failed connection (below on this page).
Troubleshoot a failed connection
If your connection fails, you can view information about the cause of the failure on the connection status page. For additional connection troubleshooting information, go to Check log events for Directory Sync.
Edit a directory
- Click the name of the external directory that you want to edit.
- Next to Sync status, click Turn off
to deactivate the sync.
- Update the details of the selected directory.
- Click Save and Test Connection.
- Reactivate sync, if needed.
Remove a directory
Important: Make sure that you have retained any information you need from the external directory before you remove it. When you remove an external directory, the connection and sync setup is deleted. Any data that was synced to your Google cloud directory is retained.
- On the directory details page, next to Sync status, click Turn off .
- Click Delete
Delete.
Reauthorize an Azure AD connection
You can reauthorize the Azure AD connection and renew the authentication token.
- Click the name of the external directory that you want to reauthorize.
- For Sync status, click Turn off to deactivate the sync.
- Click Reauthorize.
- Enter your Microsoft credentials.
- Check the Consent on behalf of your organization boxAccept.
- Reactivate sync, if needed.
Related topics
Admin log events
Next step
Set up user sync
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.
