Skip to main content
Druva Documentation

How to configure inSync with G Suite?

inSync Cloud Editions: File:/tick.png Elite Plus File:/tick.png Elite File:/cross.png Enterprise File:/cross.png Business

Configure inSync to integrate with G Suite

Overview

You configure inSync to integrate with G Suite, so that inSync connects with your G Suite admin account and accesses the data of G Suite users that are associated with your G Suite admin account.

Before you begin

In addition to the prerequisites for backing up cloud apps data, ensure the following:

  • You use the Google Super Administrator account for configuring inSync to integrate with G Suite.
  • You have not logged on to Google through any other Google account. In such case, inSync displays an error and you will not be able to install the Druva inSync for G Suite app.

Procedure

To integrate inSync with G Suite:

  1. On the inSync Management Console menu bar, click Data Sources > G Suite. The Add G Suite account page appears.
     GSuite- Not configured.png
  2. Click the Add G Suite Account button.
  3. On the confirmation popup that appears, click Configure

    Confirmation_new.png

  4. On the Google sign-in page, enter the G Suite super administrator's username and password, and then click Next.
  5. On the next page, that appears, click Allow to allow inSync to access your super administrator account and the users details that are associated with your account.  

    allow_marked.png

  6. On the Google Workspace Marketplace page, click Domain Install.

Domain_install_marked_updated headertext.png

  1.  Click Continue on the confirmation pop-up that appears.

Domain wide install popup_marked.png

  1. On the Druva inSync for G Suite dialog box, perform the following steps:

    Accept_permissions_1_marked.png

    • From the Turn ON for list, select the domain for which you want to provide access to.
    • Select the terms of service check box, and then click Accept to allow inSync to access your Google account's data. A confirmation pop-up appears after the installation is complete.

Download _done_marked.png

  1. On the Druva inSync for G Suite has been installed pop-up, click Done. inSync connects to your G Suite admin account and can access data of all the users who are associated with your G Suite admin account. Once Druva inSync for G Suite is installed, perform the following steps:
    1. On the Google Admin Console, click the App launcher icon and navigate to Druva inSync for G Suite icon. Click Druva inSync for G Suite icon to launch the app in the inSync  Management Console.

GoogleAdminconsole_updated.png

  1. After the configuration is complete, you are redirected back to inSync Management Console, and you can see the Verify Configuration dialog. In the dialog, you can select a user from the organization to verify the inSync integration with G Suite.

Note: Provide an email address in the Select a user field. User Principal Name (UPN) is not supported at the moment.

After the G Suite is configured, you can view the configuration details on the G Suite Overview page. For more information, see the Manage Cloud App Accounts page.

Get user data encryption key(ekey)

To ensure that the GSuite data that is backed up is secure, you must configure Druva inSync to get the data encryption key(ekey). 

 inSync requires access to the ekey to initiate the scheduled backup of any GSuite data. The ekey is used to encrypt the user data when it is being backed up to the inSync Cloud. This is part of the digital envelope encryption process that Druva strictly adheres to. Druva does not store ekey of the users and has no access to the data.

Use one of the following methods to enable Druva inSync to get the user data encryption key(ekey):

After inSync integrates with your G Suite admin account, you can perform the following additional configurations:

Configure Cloud Apps settings for G Suite

Define the user attribute that you want Druva inSync to use to map user account to their G Suite app account.

 Only inSync administrators with the Cloud administrator role can configure the user account access settings.

Configure user accounts access using the inSync email ID or Active Directory(AD) attribute

By default, inSync uses the email address of inSync users to map users to their G Suite app account.

If you have integrated Active Directory (AD) or LDAP with inSync to manage user information, you can configure Druva inSync to use the User Principal Name (UPN) of users for identifying and associating them to their G Suite app account.

Druva inSync gets the UPN information through AD Mapping configured to fetch user accounts from configured AD/LDAP with Druva inSync. 

Druva inSync then automatically gets user details and identifies the user accounts with the configured Cloud Apps account.

Procedure

  1. On the inSync Management Console menu bar, click Data Sources > G Suite.
  2. On the Overview page click More options icon.png  and then click Settings. The Cloud App Settings dialog box appears.
  3. By default, inSync Email ID is configured for accessing user accounts. To configure Druva inSync to use User Principal Name (UPN) for accessing user accounts, select AD Attribute.

Cloud App Settings_Oct6.png

4. Click OK.

Configure the User custom domain for G Suite

An organization may have a custom domain associated with different cloud applications such as G Suite. Druva inSync Cloud administrator must map the Druva inSync user IDs of the users using the G Suite apps with the custom domain.

If the Druva inSync user ID does not match with the Cloud application domain ID configured by the organization, backup for that particular cloud application services fails with an error USER NOT FOUND. 

Configuring the user custom domain for G Suite enables the administrator to allow Druva inSync to access the user's details.

Procedure

  1. On the inSync Management Console menu bar, click Data Sources > G Suite.
  2. On the Overview page click More options icon.png  and then click Settings. The Cloud App Settings dialog box appears.
  3. To configure a custom domain for the selected Cloud App, enter a valid and unique User custom domain name. The custom domain specified in this field replaces the inSync user's existing domain and is used to access the user's details for the configured cloud application.

Cloud App Settings_Oct6.png

  1. Click OK.

Associate and add users to G Suite enabled Cloud Apps profile

The procedure to associate and add users depends on the Cloud Apps Settings defined:

Cloud Apps Settings Procedure
inSync Email ID

Add users individually or add a group of users by importing their information from a CSV file. To learn more about each option, see:

 If you have not created a Cloud Apps enabled profile, you may add the users to the Default or any existing profile and then enable Cloud Apps feature for this profile.

AD attribute

Druva inSync users are automatically imported and mapped to their G Suite account.

If your preferred method to map users is AD attribute option, then you must have the Active Directory (AD) or LDAP  integrated with inSync. To learn more about how to integrate Active Directory (AD) or LDAP  integrated with inSync, see Create an AD/LDAP mappin

Enable Cloud App backup for the user in associated profile

Procedure

To enable Cloud App backup for G Suite user,

  1. Click on the concerned user’s Profile. The Manage Profile page appears.

  2. Click Cloud Apps and then click on Edit.

Step 2.png

  1. On the Edit Cloud Apps Configuration page, click G Suite.

  2. Select the checkbox besides Gmail and Google Drive as per your need. Click Save.

Step 4.png

Enable alerts whenever the cloud apps status changes

Overview

After you integrate cloud apps with inSync, you can choose to receive alerts whenever the cloud apps status changes.  For example, Not Connected.

Procedure

To enable the alerts for cloud apps status,

  1. On the inSync Management Console menu bar, click clipboard_ef208cd3ad774c2804b6993659e8a2edc.png. The list of all alerts appears under the Active Alerts tab.
  2. Click the Alert Subscriptions tab.  A list of available alerts is displayed.
  3. Select the Cloud Apps Status alert, and then click Edit. The Edit Alert Notifications window appears.
  4. In the Admins to be notified field, select the administrators who must receive the alerts. By default, the server administrators are notified about the alerts for cloud apps status.
  5. If any user action is required, select the Notify user checkbox.
  6. Click Save.

Reconfigure G Suite

Overview

When you reconfigure a cloud application, inSync stops all the ongoing cloud app backups. 

Procedure

To reconfigure G Suite:

  1. On the inSync Management Console menu bar, click Data Sources > G Suite. The G Suite Overview page appears.
  2. Select Overview Re-Configure.
  3. On the popup message that appears, click Yes

  4. On the Google sign-in page, select the Google super administrator's account.
  5. On the next page that appears, click Allow to allow inSync to access your Google super administrator account and the user details that are associated with your account. 

  6. On the G Suite Marketplace page, click Domain Install.

Because you had previously installed the Druva inSync for G Suite Marketplace app, inSync directly navigates to the Manage Cloud App Accounts page on the inSync Management Console. inSync connects to your G Suite admin account and can access data of all the users who are associated with your G Suite admin account. 

To check the inSync integration with G Suite, see Verify Configuration.