Exclude Users from the Google Workspace SAML Integration

Purpose

The Google Workspace email integration with Practice Protect requires team members to use their Practice Protect credentials to access their Google Workspace account & applications. The following guide will show you how to exclude users from the integration.

Take note that, users who are excluded will only be signing in with their Google Workspace credentials. It’s strongly recommended to enable multi-factor authentication within your Google Workspace environment.

Prerequisites

• Super Admin access to Google Workspace.

Instructions

1. Login to Google Admin Center.
   
2. On the home dashboard left menu, Click on Directory then Groups
   
3. Create a new group by selecting Create Group.
   
4.  Fill in the required details:
   Group Name: PP Email Integration Exclusion
   Group Email: [email protected]
   Group Description: Please don’t delete. This group is created for excluding user account on the email integration with Practice Protect.
   Group Owners: Add the Super Admin User Account.Tick Security under the labels section then select Next.
   
5. Under Group Settings configure the settings as below then select Create Group.
6. Click Done. It will return to the Google Groups page.
7. Click the group you just created (E.g. PP Email Integration Exclusion).
8. Click on Add Members then select the user that needs to be excluded & select Add to Group.
   
9. On the left menu, go to Security > Authentication > SSO with third party IdP. Click Manage on Manage SSO Profile assignments.
   
   Note:

   This page could be different on your side, click Get Started > under Manage SSO Profile assignments.

10. On the left, click Group and search for the group (e.g. PP Email Integration Exclusion)  that was created in the previous step.
11. Change the SSO Profile assignment to None and click Save
12. Confirm it is applied on the PP Exclusion group
13. Instruct the user to log in to Google Workspace apps (e.g., Gmail) using their Google Workspace username and password, bypassing the Practice Protect integration. The following section provides guidance on resetting the password for the user account to sign in.

Reset Google Workspace Password

1. Login to Google Admin and select to Directory then Users.
2. Select Reset Password on the team member that has been excluded from the Practice Protect integration.
3. Pick Create a password. Use a password generator here and paste the generated password. Tick the option to require the team member to set their own password upon login.
4. Select Reset.
   
5. Select Copy Password and provide the password to the team member logging into this account.
6. Select Done.
7. The team member can now sign into their Google account using the password you have configured.