About G Suite Password Sync
G Suite Password Sync (GSPS) automatically keeps your users' G Suite passwords in sync with their Microsoft® Active Directory® passwords. Whenever a user's Active Directory password is changed, GSPS pushes the change to G Suite immediately.
GSPS used to be known as Google Apps Password Sync (GAPS).
Important: GSPS never changes your Active Directory passwords; it only syncs Active Directory password changes to G Suite.
Before you beginGSPS system requirements
This feature isn't available in the legacy free edition of Google Apps.Microsoft Active Directory requirements:
- Microsoft Active Directory 2008, 2012, or 2016 (AD DS, not AD LDS).
- GSPS must be installed on all domain controllers.
- Domain controllers need an Internet connection to connect to the following sites/ports:
Purpose URL Port number Authentication https://accounts.google.com
443 API access https://www.googleapis.com 443 Certificate Revocation Lists / Online Certificate Status Protocol http://crl.geotrust.com/crls/secureca.crl
Note: The certificate authority URLs can change at any point. For the most recent list of CRL/OCSP URLs, review the certificate information of the above API and Authentication hosts.
Download the correct MSI for your server's architecture:
Restart the server
Always restart the server after installing or upgrading GSPS.
See step-by-step instructions on how to Set up G Suite Password Sync.