Google Workspace SSO

Sign in to Empuls with
Google Workspace

Let employees reach recognition and rewards with the Google account they already use.

Book a demo

Get a personalised walkthrough. We respond within one business day.

What you can do

Four things you get once Google sign-in is on

Google handles authentication. Empuls checks the domain, so access follows the accounts your IT team already manages.

One-click sign-in

Sign in with Google
Employees click the "Sign in with Google" button on the Empuls login page and approve access on Google's consent screen.
No new passwords
People use the Google Workspace account they already have, so there are no separate Empuls credentials to create or reset.

Domain-locked access

Verified Workspace domain only
Empuls checks that the signing-in email matches your verified Workspace domain before letting the user in.
Outside accounts are rejected
A Google account from another domain sees the message "Account not authorized for this organization".

Provisioning your way

Just-in-Time or existing users only
Choose to auto-create accounts on first sign-in, or restrict sign-in to users who already exist in Empuls.
Default access role
Set the role that just-in-time users receive when their account is created.

Profiles filled in for you

Basics come from Google
When an account is created just-in-time, name, profile picture, and basic profile fields are populated from the Google account.
HR fields need a directory sync
Department and manager are not set by Google sign-in. They require a separate directory sync integration.

Use cases

Who runs it, and what for

Three ways teams use Google Workspace sign-in with Empuls.

IT and Security

Keep access inside your domain

Only accounts on your verified Workspace domain can sign in, and you can force Google sign-in by disabling other authentication methods.

People Ops

New hires get in on day one

With just-in-time provisioning, a new employee signs in with Google and an account is created with the default role.

Admins

Choose how accounts are created

Pick just-in-time for open rollout, or existing users only when you want to control who has an Empuls account.

How it works

From Admin Hub to employee sign-in

Step 1

Enable Google Workspace

In Admin Hub, open User Access Settings, then User Authentication. Toggle on Google Workspace and click Configure.

Step 2

Approve access

Sign in with a Google Workspace super-admin account and approve the OAuth scopes.

Step 3

Confirm domain and provisioning

Confirm the verified domain Empuls shows, then choose Just-in-Time or Existing Users Only.

Step 4

Save and go live

Save the settings. Employees can now sign in with the Google button on the Empuls login page.

Setup

Google Workspace setup, step by step

Enable the connection, approve access, pick a provisioning mode, and save.

Integration type

Native Google Workspace sign-in using OAuth 2.0 with domain restriction, for Empuls.

Sign-in flow

The user clicks Sign in with Google, authenticates with Google, and Empuls validates the domain.

Key settings

Default access role for just-in-time users, and a provisioning mode: Just-in-Time or Existing Users Only.

Prerequisites

Super Admin access in Empuls, super-admin access for your Google Workspace domain, and user emails on the verified domain.

Learn how to set up
Common Questions

Frequently asked questions

Common questions from IT, security, and HR admins evaluating Google Workspace SSO for Empuls.

Still have a question? Talk to us
OAuth 2.0, restricted to your verified Google Workspace domain.
Super Admin access in Empuls and super-admin access to your Google Workspace domain. User email addresses must be on the verified domain.
They are rejected with the message "Account not authorized for this organization".
Just-in-Time creates an account with the default access role the first time a domain user signs in. Existing Users Only allows sign-in only for users already in Empuls.
No. Name, profile picture, and basic profile fields come from the Google account. HR fields such as department and manager need a separate directory sync integration.
The help center guide covers Empuls, with one domain per tenant.

See it in your own Google Workspace setup

A 30-minute call. We'll walk through the sign-in setup and how rollout to your teams would work.

Book a demo