> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getprimo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect your email provider

> Connect Google Workspace or Microsoft Entra ID to Primo to enable SaaS discovery, automated provisioning, and identity management across your organization.

Connecting your email provider is the first step to unlocking SaaS Management in Primo. It enables automatic user provisioning, SaaS discovery, and — when combined with offboarding — automated access revocation.

Primo supports two email providers:

<CardGroup cols={2}>
  <Card title="Google Workspace" icon="google" href="#google-workspace">
    Connect your Google Workspace organization to enable SaaS discovery, identity sync, and automated provisioning.
  </Card>

  <Card title="Microsoft Entra ID" icon="microsoft" href="#microsoft-entra-id">
    Connect your Microsoft Entra ID (formerly Azure AD) tenant to enable identity sync and automated provisioning.
  </Card>
</CardGroup>

***

## Google Workspace

### What connecting Google Workspace enables

* **SaaS Discovery** — automatically detect all apps accessed using Google sign-in across your organization.
* **Identity sync** — import your users and groups from Google Workspace.
* **Automated provisioning** — create, update, and suspend Google Workspace accounts as part of onboarding/offboarding workflows.
* **Data transfer at offboarding** — transfer Drive files and email ownership when an employee leaves.

### Connect Google Workspace

<Steps>
  <Step title="Go to Integrations in Primo">
    Navigate to **Settings > Integrations** and select **Google Workspace**.
  </Step>

  <Step title="Authenticate with a Google Workspace Super Admin account">
    You must authenticate as a Super Administrator to grant the required permissions.
  </Step>

  <Step title="Authorize the required scopes">
    Primo requests read access to users, groups, and org units — and write access for provisioning and offboarding actions.
  </Step>

  <Step title="Launch the initial sync">
    Once connected, Primo imports your users and groups. SaaS Mapping begins automatically.
  </Step>
</Steps>

### What Primo accesses in Google Workspace

| Data                        | Purpose                        |
| --------------------------- | ------------------------------ |
| Users (name, email, status) | Identity sync and provisioning |
| Groups and org units        | Apply provisioning rules       |
| OAuth app access            | SaaS Discovery mapping         |
| Drive (at offboarding only) | File ownership transfer        |

***

## Microsoft Entra ID

### What connecting Entra ID enables

* **Identity sync** — import users and groups from your Entra tenant.
* **Automated provisioning** — create, update, and disable Entra accounts as part of onboarding/offboarding.
* **Mac login via Entra** — allow employees to log in to their Mac with their Entra credentials (see [Entra Platform SSO](/mdm/policies/mac-login-entra)).

<Info>
  SaaS Discovery via Entra is not yet available. Use the Chrome Extension for broader SaaS coverage. See [Activate SaaS Discovery](/saas/get-started/activate-saas-discovery).
</Info>

### Connect Microsoft Entra ID

<Steps>
  <Step title="Go to Integrations in Primo">
    Navigate to **Settings > Integrations** and select **Microsoft Entra ID**.
  </Step>

  <Step title="Sign in as an Entra Global Administrator">
    You need Global Admin or a delegated admin role with the required API permissions.
  </Step>

  <Step title="Grant the required Microsoft Graph permissions">
    Primo requests permissions to read and write users, groups, and directory data.
  </Step>

  <Step title="Launch the initial sync">
    Once authorized, Primo imports your users and groups from the Entra tenant.
  </Step>
</Steps>

### What Primo accesses in Entra ID

| Data                                    | Purpose                        |
| --------------------------------------- | ------------------------------ |
| Users (name, email, status, attributes) | Identity sync and provisioning |
| Groups                                  | Apply provisioning rules       |
| Application assignments                 | SaaS visibility                |

***

## Related articles

* [Activate SaaS Discovery](/saas/get-started/activate-saas-discovery)
* [Automate your onboardings](/employees/automate-onboardings)
* [Automated offboardings](/employees/automated-offboardings)
* [Entra Platform SSO for Mac](/mdm/policies/mac-login-entra)