Skip to main content
Connect your email provider first to set up SaaS Management. It enables automatic account provisioning, SaaS discovery, and, combined with offboarding, automated access revocation. Primo supports two email providers:

​
What connecting Google Workspace enables

  • SaaS discovery — automatically detect all SaaS accessed using Google sign-in.
  • Identity sync — import your users and groups from Google Workspace.
  • Automated provisioning — create, update, and suspend Google Workspace accounts as part of onboarding/offboarding workflows.
  • Data transfer at offboarding — transfer Drive files and email ownership when an employee leaves.

​
Connect Google Workspace

1

Go to Integrations

Navigate to Settings > Integrations and select Google Workspace.
2

Authenticate with a Google Workspace Super Admin account

You must authenticate as a Super Administrator to grant the required permissions.
3

Authorize the required scopes

Primo requests read access to users, groups, and org units — and write access for provisioning and offboarding actions.
4

Launch the initial sync

Once connected, Primo imports your users and groups. SaaS discovery begins automatically.

​
What Primo accesses in Google Workspace

If your entities use separate Google Workspace accounts or Microsoft Entra tenants, connect each one as its own instance. See Connect several instances of the same SaaS.