# Google Workspace Provisioning

Keeper Enterprise is available for Google Workspace with automated user provisioning using the SCIM (System for Cross-Domain Identity Management) protocol. SCIM is an open standard that enables automated user provisioning between identity providers (like Google Workspace) and service providers (like Keeper).

{% hint style="info" %}
IMPORTANT: If you want your users to authenticate via SAML 2.0 with Google Workspace, you must first configure and install Keeper SSO Connect.  

View the full SSO Connect Cloud setup guide:\
<https://docs.keeper.io/sso-connect-cloud/>
{% endhint %}

## SCIM Overview

Companies utilizing Google Workspace for their identity services can easily deploy Keeper’s EPM solution to their users without the need to manually provision users. Keeper has developed a tight integration with Google Workspace and Google Cloud to automatically provision users and teams from Google to Keeper. In the integration, admins can select which groups and users are provisioned to Keeper.

In addition to provisioning and de-provisioning users, Keeper Enterprise provides zero-knowledge, SAML 2.0 compliant authentication with Google for seamless and frictionless access.

Integration of Keeper Enterprise into Google Workspace enables organizations of any size to secure their passwords and confidential information within an encrypted vault. By including Keeper Enterprise in their SSO implementation, organizations fill critical security and functionality gaps that are essential from a cybersecurity perspective which includes:

* Protects and generates strong passwords for any non-SAML application or website
* Implements zero-knowledge security architecture with full end-to-end encryption
* Stores SSH keys, digital certificates and any other confidential information
* Enforces password compliance and policy-based access controls across the entire organization – all employees on all their devices for every website, application and system.
* Manages shared passwords for financial, business, social media or any other critical service

Keeper is available for all Google Workspace Education, Business and Enterprise customers.

## SSO and SCIM Setup and Configuration

Google Workspace supports the following integrations with Keeper:

* SSO authentication with SAML 2.0
* Automatic User Provisioning with SCIM
* User and Team provisioning with Google Cloud Functions and Cloud Scheduler

{% hint style="info" %}
For step-by-step Google Workspace specific configuration use the following [link](/en/sso-connect-cloud/identity-provider-setup/g-suite-keeper.md).
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.keeper.io/en/enterprise-guide/user-and-team-provisioning/google-g-suite-scim.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.