Connect Google Workspace
Authorize Elba for Google Workspace using domain-wide delegation.
Connecting Google Workspace lets Elba import your organization’s users and enable the Google capabilities available to your workspace.
Administrator required
Complete this flow with a Google Workspace Super Admin. Only a Super Admin can grant domain-wide delegation.
Authorize Elba
- Start the Google Workspace connection from Elba onboarding or Settings → Integrations.
- Select Authorize. Elba opens Google Admin Console in a new tab and keeps the authorization step open.
- In Elba, copy the client ID and OAuth scopes displayed for your workspace.
- In Google Admin Console, add a new domain-wide delegation entry using those exact values.
- Save the entry, return to Elba, and continue the authorization step.
- Wait for Elba to confirm authorization and complete the first user import.
Do not copy client IDs or scopes from screenshots or old documentation. The in-product values are the source of truth for your region and environment.
Verify the connection
- The onboarding authorization step completes without an admin-policy error.
- Users begin appearing in Elba after the initial synchronization.
- The Google Workspace integration reports as connected under Settings → Integrations.
Troubleshooting
If Google displays 400: admin_policy_enforced, see Resolve Google Workspace “admin policy enforced” errors.
If authorization still fails, confirm that you are signed in with the intended Google Workspace tenant and that the delegation entry contains the exact client ID and scopes displayed by Elba.