Sync your Google Workspace directory

Connect your Google Workspace directory to import employees and groups into People & Groups. Start the connection from Jericho Security and authorize directory access with your Google Workspace administrator account.

Before you begin

• Sign in to the correct Jericho organization as an Admin or Manager. See workspace roles.
• Have a Google Workspace administrator account with permission to read users, groups, and group memberships and authorize the requested directory access.
• Make sure the email domain of that Google account is registered and verified in your Jericho organization. Check Manage Domains on the Integrations page; ask your organization administrator or Jericho Support for help if verification is incomplete.
• Review the users in that domain before connecting. This workflow imports the domain’s eligible users; it does not present a group or organizational-unit selection step.

The connection uses the authorizing Google account’s email domain. Do not assume that one connection covers every secondary domain in your Google Workspace. Contact Support to plan a multi-domain setup.

Connect Google Workspace

1. In Jericho Security, open Integrations.
2. Find Google Workspace Integration and click Sync Google Directory.
3. Select the Google Workspace administrator account for the verified domain you want to sync.
4. Review and approve the requested access. The directory permissions are read-only and cover users, user aliases, groups, group memberships, and organizational units.
5. Return to Jericho. A successful authorization displays Google Directory integration successfully created. and starts a background sync.
6. Check Last synced in the Google integration section. First sync running… means no completed sync has been recorded yet. Refresh the page later to check for a completion time.

Authorization success confirms the connection was saved; it does not mean the employee and group import has finished. Completion time depends on directory size and processing load.

Verify the results

1. Open People & Groups after the sync completes.
2. Check several expected employees by their primary Google email address. Review their names and any available department, job title, phone number, and organizational information.
3. Check imported groups and their memberships, including any nested groups you use for campaign targeting.
4. Confirm the intended recipients before using an imported group in a campaign.

What sync updates

Directory data	Behavior in Jericho
Active users with mailboxes set up	Imported as employees using their primary email address. Available profile fields are updated on later syncs.
Existing Google-managed employees	Updated when directory data changes; eligible returning employees can be restored.
Existing employees managed by another import source	Not taken over or overwritten by this Google employee sync. Contact Support if you are migrating from CSV or another directory.
Suspended, archived, or deleted Google users	Corresponding Google-managed employees can be archived in Jericho during sync.
Users missing from a completed directory listing	Can be archived in Jericho; safeguards can defer inferred removals when the listing is empty or an unusually large number is missing.
Groups and memberships	Groups are created or updated, and memberships are added for matching imported records, including nested groups.

Caution

The current sync does not automatically remove old group memberships or delete Jericho groups when they disappear from Google. Review group membership before using it for campaign targeting, especially after organizational changes. Contact Support if you need help reconciling stale memberships.

Run another sync

Return to Integrations → Google Workspace Integration, click Sync Google Directory, and complete Google authorization again. Reauthorizing the same domain can replace the account used for its connection, so use the intended administrator account.

Scheduled background syncing depends on your organization’s configuration. Ask Support to confirm whether it is active for your organization. Use Last synced to check the latest completed run rather than assuming changes appear immediately.

Troubleshooting

What you see	What to check
The domain is not registered and verified	Confirm that the selected Google account’s email domain matches a verified domain in the current Jericho organization.
Google blocks the authorization	Ask your Google Workspace administrator to review the app’s access under Security → Access and data control → API controls. Follow Google’s app access guidance.
Unable to retrieve email from Google authentication.	Retry authorization with the intended Workspace account. Contact Support if the message persists.
Integration error. or no completed sync appears	Confirm the Google account still has directory privileges and approved access, then reauthorize. If the issue persists, send Support the message and the time of your attempt.
An employee is missing	Check the user’s primary email domain, mailbox setup, and suspension or archive status. Also check whether the employee is already managed by another import source.
A group has unexpected members	Compare the membership in Google and Jericho; removed Google memberships are not automatically removed in Jericho.

Related setup

Directory sync imports people and groups. Sign-in, email delivery, and mailbox remediation have their own setup:

• Google Workspace single sign-on
• Google Workspace allowlisting
• Triage Center email integration
• Direct Mail Injection