About G Suite Password Sync
G Suite Password Sync (GSPS) automatically keeps your users' passwords in sync with their Microsoft® Active Directory® passwords. Whenever a user's Active Directory password is changed, GSPS immediately pushes the change to their managed Google Account.
Important: GSPS never changes Active Directory passwords; it only syncs Active Directory password changes to your organization's Google Account.
GSPS is available to G Suite and Cloud Identity administrators.
Before you begin
GSPS system requirementsIf you have the legacy free edition of G Suite, upgrade to G Suite Basic to get this feature.
Microsoft Active Directory 2008, 2012, or 2016 (AD DS, not AD LDS).
Note: GSPS currently doesn't support Additional LSA Protection with Secure Boot.
- GSPS must be installed on all domain controllers.
- Domain controllers need an internet connection to connect to the following sites/ports:
Purpose URL Port number Authentication https://accounts.google.com
https://www.googleapis.com443 API access https://www.googleapis.com 443 Certificate Revocation Lists / Online Certificate Status Protocol http://crl.geotrust.com/crls/secureca.crl
http://g.symcb.com/crls/gtglobal.crl
http://pki.google.com/GIAG2.crl
http://g.symcd.com
http://clients1.google.com/ocsp
http://ocsp.pki.goog/gsr280 Note: The certificate authority URLs can change at any point. For the most recent list of CRL/OCSP URLs, review the certificate information of the above API and Authentication hosts.
Download GSPS
Download the correct MSI for your server's architecture:
Restart the server
Always restart the server after installing or upgrading GSPS.
Next
See step-by-step instructions on how to Set up G Suite Password Sync.