Creating Google Workspace Users via Siit Webhook

Seamlessly Provision Users with Siit Webhooks and the Google Directory API.

Connecting your Siit workflows to Google Workspace allows you to automate user provisioning, ensuring that new employees are ready to go as soon as their Siit lifecycle event triggers.

Prerequisites: Google Workspace Setup

Before configuring the webhook in Siit, you need to set up the Google Workspace Directory API. This step ensures Siit has permission to create users.

1. Enable the Admin SDK: In your Google Cloud project, enable the Admin SDK API (specifically for the Directory API).

2. Authentication: The Google Directory API requires an OAuth 2.0 token for authorization. The most secure and common method for server-to-server workflows is using a Service Account with Domain-Wide Delegation enabled.

   • Once set up, your workflow (or an intermediary service) must be able to generate and provide a valid Bearer Token for the Authorization header.

3. API Endpoint: The specific URL for creating a user is:

   https://admin.googleapis.com/admin/directory/v1/users
   

For full details on the required fields and response structure, consult the official Google documentation for the users.insert method: Directory API: Users Insert.

🛠️ Siit Webhook Configuration

Using the "Send external request" action in your Siit workflow, follow these steps to construct the request.

Step 1: Set the URL and Method

In the Send external request panel (as shown in your screenshot):

1. URL: Enter the Google API endpoint:

   https://admin.googleapis.com/admin/directory/v1/users
   

2. HTTP Method: Select POST (this is mandatory for creating a new resource).

Step 2: Add Headers

You need to add at least two headers: one for the data format and one for authentication. Click + Add header.

Select the Raw option under the Body section. You will use the available Siit variables (from the "Add variable" sidebar) to dynamically populate the user data required by the Google API.

The Google API requires a minimum set of fields, including the primary email, the user's name, and a temporary password.

Use the + Add variable button to inject the variable placeholders directly into the Raw text field.

Example Raw JSON Body:

{
  "primaryEmail": "{Email}",
  "name": {
    "givenName": "{First name}",
    "familyName": "{Last name}"
  },
  "password": "[SOME_TEMPORARY_PASSWORD]",
  "changePasswordAtNextLogin": true,
  "suspended": false
}