SSO discovery - Google Workspace

Connect your Google Workspace email to discover the systems your employees use, including unmanaged tools and dormant accounts.

SSO discovery finds the systems connected to your identity provider and shows which employees have access to each one. Connecting Google Workspace SSO discovers the managed systems your employees sign in to with their Google account.

Before you start

You'll need access to the Google Workspace Admin console.

Step 1: Allow the MineOS SSO Discovery app in Google Workspace

  1. Sign in to the Google Admin console.
  2. Go to Security › Access and data control › API controls.
  3. Under App access control, click Manage App Access.
  4. Under Configured apps, click Configure new app.
  5. In App Name or Client ID, paste the following value and click Search:

685949372679-567mh3mbdi96lnleg9qllipef6p185ft.apps.googleusercontent.com

  1. Select MineOS SSO Discovery

  2. Choose the OAuth client ID and click Select.

  3. When asked which organizational units to apply the app to, select your entire organization, and click Continue.

  4. Select Trusted and click Continue.

  5. Review the settings and click Finish.

SSO discovery always scans your entire Google Workspace organization, whichever organizational units you select in step 8.

For more information, see Google's guide to controlling which apps access Google Workspace data.

Step 2: Connect in MineOS

  1. Sign in to MineOS.
  2. In the left navigation, under Data mapping, select Radar.
  3. Click Radar Setup.
  4. Under Single Sign-On, select Google.
  5. Click Sign in with Google and complete the authorization flow.

A message confirms the connection was successful, and discovery starts.

Permissions

ScopeWhy MineOS needs it
admin.directory.user.readonlyRead your employee directory, to show which employees have access to each system

All permissions are read-only. [confirm: any other scopes requested in the Sign in with Google step]

What happens next

Discovered systems appear in Radar, with the employees who have access to each one. Discovery continues automatically, so new systems appear as employees start using them. See Reviewing findings.

Related articles


Did this page help you?