Google Cloud Directory Sync (GCDS) generates an OAuth token in Configuration Manager and uses it to connect to and synchronize with your Google Account. You need to authorize your account to allow authentication.
If an administrator sets up authentication with their account and then leaves your organization, you won't be able to authorize GCDS. We recommend that you create a single, separate super admin account to use with GCDS to avoid this problem.
Authorize your Google Account
- Open Configuration Manager and click Google Domain Configuration.
- Click Authorize NowSign In.
- Sign in to your Google Account as a super admin.
- Click Accept and copy the token.
- In Configuration Manager, paste the token and click Validate.
For details on how to authorize GCDS on a machine without a GUI, see GCDS FAQ.
(Optional) Revoke the access token
If you're concerned about using long-standing credentials, you can revoke the access token and reauthorize:
- Ensure that you’re signed in using the super admin account that was used to authorize GCDS.
- Go to Apps with access to your account.
- Under Google apps, click Google Cloud Directory Sync.
- Click Remove Access.
- Reauthorize your account by following the steps above.
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.