Configure Drift user provisioning

As an administrator, once you've set up SSO, your next step is to set up automated user provisioning to authorize, create, modify, or delete your users' identity once in G Suite, and have the changes to that identity reflected in Drift.

Set up user provisioning for the Drift application
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Appsand thenWeb and mobile apps.

  3. Click the Drift application.
  4. Select User provisioning.
  5. Under User provisioning, click Set up user provisioning.
  6. In the Authorize window, click Authorize.

    Drift opens in another tab, and asks for a one-time authorization to access your account. If you've revoked access and haven't reauthorized since then, you'll be asked to authorize again.

    Note: If you haven't signed into your Drift administrator account before clicking Authorize, you're prompted to sign in. If you can't access your Drift application, click Reauthorize app to be prompted to sign in.

  7. In the Map attributes dialog box:
    1. Next to the selected Cloud Directory attribute, click the Down arrow "" to map to the corresponding Drift attribute. Attributes marked with (*) must be mapped.
    2. Click Next.
  8. (Optional) In the Set provisioning scope dialog box, add a group to restrict provisioning to members of groups you define:
    1. Click the underscore and begin typing your group name. 
      A list of available groups appears.
    2. Selecting one adds it and opens another underscore to use to add another. Add more groups, if necessary. 
    3. To remove any group you've added, click Edit "" next to it.
  9. Once you’re done, click Finish.
  10. Review the information in the Provisioning summary dialog box, then click OK.
  11. Choose one of the following actions:
    • Click Activate provisioning.
    • If needed, first enable the Activate Provisioning button: 
      1. Set the app to On for everyone or On for some organizations
        If the app is set to Off, this choice is grayed out.
      2. Reload the page, then click Activate provisioning.
  12.  ​In the confirmation dialog box, click Turn on.
Display user provisioning

Once provisioning is on, Google starts collecting usage information. You'll see the usage information section next to the User Provisioning section. There won't be any numbers next to the event names until you enable provisioning.

The following event names provide the usage information for the last 30 days:

  • Users created
  • Users hard deleted
  • User failures

For more information, see Monitor user provisioning.

Edit provisioning scope

You may want to restrict the scope of provisioning to members of groups you define.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Appsand thenWeb and mobile apps.

  3. Click the Drift application.
  4. Select User provisioning.
  5. In this section, click Edit provisioning scope
  6. In the Set provisioning scope dialog box, add a group to restrict provisioning to members of groups you define:
    1. Click the underscore and start typing your group name. 
      A list of available groups appears.
    2. Selecting one adds it and opens another underscore to use to add another. Add more groups, if necessary. 
    3. To remove any group you've added, click Edit "" next to it.
  7. Once you’re done, click Finish.

The next time you click Edit provisioning scope under User provisioning, the groups you added appear in the Set provisioning scope window. If you've turned on the Drift application for a set of organizational units, the provisioning scope will be restricted to those users in the added groups who are also members of those organizations.

Deactivate user provisioning

To disable user provisioning for the Drift application without losing all the configuration information:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Appsand thenWeb and mobile apps.

  3. Click the Drift application.
  4. Select User provisioning.
  5. Under User provisioning, click Deactivate provisioning.
  6. In the Deactivate provisioning dialog box, click Deactivate.
Define deprovisioning time frames

To define how long deprovisioning actions should be delayed before taking effect:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Appsand thenWeb and mobile apps.

  3. Open the OfficeSpace application.
  4. Select the User provisioning section.
  5. In this section, click Edit deprovisioning config.
    A new Deprovisioning configuration window appears.
  6. Choose how long deprovisioning actions should be delayed before taking effect. Select at least one of these options:
    1. When an app is turned off for the user, hard delete their account after [number of days].
    2. When a user is suspended on Google, hard delete their account after [number of days].
    3. When a user is deleted from Google, hard delete their account after [number of days].

      The amount of time before deprovisioning takes effect can be set to: within 24 hours or after one, 7, or 30 days.

      Tip: Always set more time before hard deleting a user's account than for suspending a user's account.
  7. Click Save to save your edited deprovisioning configuration.
Remove user provisioning

To disable user provisioning for the Drift application and remove all the configuration information:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Appsand thenWeb and mobile apps.

  3. Click the Drift application.
  4. Select User provisioning.
  5. Under User provisioning, click Delete provisioning.
  6. In the Delete provisioning config dialog box, click Delete to deactivate user provisioning and remove all configuration information. 

    Existing users on Drift are not deprovisioned.
Was this helpful?
How can we improve it?