--- title: "Google Services" slug: "google-services" updated: 2026-03-05T13:35:05Z published: 2026-03-05T13:35:05Z canonical: "support.perimeter81.com/google-services" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.perimeter81.com/llms.txt > Use this file to discover all available pages before exploring further. # Google Services ## Introduction This article elucidates the methods to set up Google Suite as your identity provider using either Google Service or Google SAML applications. The integration with Google Suite allows Harmony SASE to authenticate users seamlessly. ## Steps You can connect your Account to Google Suite by providing the Google Client ID and Client Secret to Harmony SASE. Follow the steps below: - Generate the Google Client ID and Client Secret - Enable the Admin SDK service - Enable and configure the Harmony SASE GSuite Connection #### Generating the Google Client ID and Client Secret 1. While logged in to your Google admin account, go to the API Manager and then **Credentials** in the **Management Portal** on the left side. ([https://console.developers.google.com/projectselector/apis/credentials?pli=1](https://console.developers.google.com/projectselector/apis/credentials?pli=1) ) You should follow steps 2-3 only in case you do not have already a project defined on Google Cloud Platform. 2. Select **Create** to create a new project. ![360008122659mceclip0.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/360008122659mceclip0.png) 3. In the dialog box that appears, provide a Project name, answer Google's email- and privacy-related questions, and select **Create**: ![360008123339mceclip2.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/360008123339mceclip2.png) 4. Under OAuth consent screen, **User Type** is External ![360008114680mceclip3.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/360008114680mceclip3.png) Click **Create.** 5. **Application Type** is **Public; write** down the **Application Name** (for example, *Harmony SASE)* **User support email** is your email address **App logo** is optional and can be found using [this link](https://perimeter81-frontend-assets.s3.amazonaws.com/logos/P81_CP_icon.svg)![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Screen%20Shot%202021-03-23%20at%2012.04.32%20PM.png)Fill in the application Homepage Link with your workspace URL ![httpsfilesreadmeio98189f0-ScreenShot2018-12-20at140541.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/httpsfilesreadmeio98189f0-ScreenShot2018-12-20at140541.png) You will also need to add “perimeter81.com” into the “Authorized domains” list![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Screen%20Shot%202021-03-23%20at%2012.09.34%20PM.png)**Developer contact information** is [sase-support@checkpoint.com](mailto:sase-support@checkpoint.com) and click **Save and continue** 6. Click **Add or remove Scopes** ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Screen%20Shot%202021-03-23%20at%2012.14.55%20PM.png) 7. Select the required Authorization scopes**,** click**Update**, and****click**Save and Continue** For more information about the available Authorization scopes, see the [Google Workspace Admin SDK documentation](https://developers.google.com/workspace/admin/directory/reference/rest/v1/groups/list#:~:text=of%20this%20result.-,Authorization%20scopes,information%2C%20see%20the%20Authorization%20guide.)![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Screen%20Shot%202021-03-23%20at%2012.15.49%20PM.png) 8. You can either test the app with some **T****est users**, or just click **Save and Continue** **(**Selecting**Test users**will require you to**Publish**the App at a later point**)**![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Screen%20Shot%202021-03-23%20at%2012.18.44%20PM.png) 9. Google will take a moment to create your project. When the process completes, Google will prompt you to create the credentials you need. ![httpsfilesreadmeio1c1efea-ScreenShot2018-10-10at160033.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/httpsfilesreadmeio1c1efea-ScreenShot2018-10-10at160033.png) 10. Select **Create credentials** to display a pop-up menu listing the types of credentials you can create. Select the **OAuth client ID** option. 11. At this point, Google will display a warning banner that says, "To create an OAuth client ID, you must first set a product name on the consent screen." Select the **Configure consent screen** to begin this process. Provide a **Product Name** that will be shown to users when they log in through Google. ![httpsfilesreadmeiofd5e379-ScreenShot2018-10-10at160543.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/httpsfilesreadmeiofd5e379-ScreenShot2018-10-10at160543.png) 12. At this point, you will be prompted to provide additional information about your newly-created app. 13. Select **Web application**, and enter Harmony SASE as the name for the app. 14. Under **Restrictions**, enter the following information: - Authorized JavaScript origins: [https://auth.perimeter81.com](https://auth.perimeter81.com/) - Authorized redirect URI: [https://auth.perimeter81.com/login/callback](https://auth.perimeter81.com/login/callback) 15. Select **Create**. Your Client ID and Client Secret will be displayed. Google may show an "unverified app" screen before displaying the consent screen for your app. To remove the unverified app screen, complete the [OAuth Developer Verification](https://support.google.com/code/contact/oauth_app_verification) process. ![httpsfilesreadmeio981dcb3-ScreenShot2018-10-10at160600.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/httpsfilesreadmeio981dcb3-ScreenShot2018-10-10at160600.png) 16. Save your **Client Id** and **Client Secret**in a separate location to enter later into the Connection settings in Harmony SASE. #### Enabling the Admin SDK Service If you are planning to connect to Google Suite enterprise domains, you will need to enable the Admin SDK service. 1. Navigate to the **Library** page of the API Manager. 2. Select **Admin SDK** from the list of APIs. ![httpsfilesreadmeio70a78b7-api-manager-library.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/httpsfilesreadmeio70a78b7-api-manager-library.png) 3. On the **Admin SDK** page, select **Enable**. ![httpsfilesreadmeioe4f575c-enable-admin-sdk.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/httpsfilesreadmeioe4f575c-enable-admin-sdk.png) #### Enabling and Configuring the Google Suite Connection 1. Log in to your Harmony SASE Management Platform, and navigate to **Settings** and then **Identity****Providers**. ![360008600120addprovider1.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/360008600120addprovider1.png) 2. Select **+ Add Provider.** 3. Select **Google Workspace**then click**Continue**.**![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1650990717349.png)** 4. Fill in the **Google****Apps Domain**, **Domain Aliases**, **C****lient ID,** and **Client secret.****![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/Screenshot%202024-09-06%20at%203.22.20%E2%80%AFPM.png)** 5. Select **Done**. 6. You will need to configure your settings so that your app can use Google's Admin APIs. If you're the administrator, you can select **Continue** on the Connection's Settings page to do so. If not, provide the URL you're given to your administrator so that the required settings can be adjusted. 7. Please noteBest practice is to authenticate this with a service user (such as [it@.com](mailto:it@<yourcompany>.com)) with sufficient permissions. If the user leaves the organisation you will have to create new Client ID and Secret and then re-authenticate with a new user. 8. ![httpsfilesreadmeio874a37a-b.png](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/httpsfilesreadmeio874a37a-b.png) You're all set. Google Suite is now connected and users should be able to login with their G Suite account. ## Recommendations - When choosing between Google Service and Google SAML applications, consider the potential cost implications on Google's side for using Google Services. - A SAML integration mandates all users to authenticate using Google Suite, whereas a Google Service setup offers more flexibility, allowing specific user groups only. - Ensure you have the necessary permissions in both Google Suite and Harmony SASE for a successful integration. - When setting up, always replace placeholders with the correct values, such as your workspace name. - Save the generated Google Client ID and Client Secret for later use in Harmony SASE. - If connecting to Google Suite enterprise domains, remember to enable the Admin SDK service. - Periodically review your Google Suite configuration settings to ensure alignment with any updates or changes in the Harmony SASE platform. ## Troubleshooting If you encounter issues during or after the setup, try reviewing your settings to ensure everything matches the instructions. In particular, check the IP addresses and other details you entered during setup. If issues persist, please consult our dedicated support. ## Support Contacts If you have any difficulties or questions, don't hesitate to contact Harmony SASE's support team. We offer 24/7 chat support on our website at [sase.checkpoint.com](https://sase.checkpoint.com/), or you can email us at sase-support@checkpoint.com. We're here to assist you and ensure your VPN tunnel setup is a success