Integrations
Connect with email platforms and third-party services
Google Workspace Integration
Connect your Google Workspace to automatically sync employees, organizational units, and groups—then deploy signatures directly to Gmail without any employee action required.
Overview
The Google Workspace integration allows you to:
- Automatically sync employees from your Google Workspace directory
- Sync organizational units and Google Groups for targeted signature assignments
- Deploy signatures directly to Gmail via API
- Set up assignment rules to automatically assign signatures based on org structure
Prerequisites: Google Workspace Super Admin access and 5-10 minutes for setup. No Google Cloud Console access needed.
What is Domain-Wide Delegation? This allows Lastline to access your Google Workspace data without requiring each user to authorize individually—the same approach used by Exclaimer, CodeTwo, and other major solutions. Lastline can only access data you explicitly authorize; we cannot read email content.
Setup Guide
Step 1: Open Setup Wizard
In Lastline, go to Integrations → Connect Google Workspace. The wizard displays your unique Client ID and OAuth scopes.
Step 2: Authorize in Google Admin Console
- Open Google Workspace Admin Console
- Navigate to: Security → Access and data control → API Controls → Manage Domain-Wide Delegation
- Click Add new and enter the Client ID and OAuth scopes from Lastline's wizard
- Click Authorize
Step 3: Connect and Configure
- Enter your Admin Email (must be Super Admin) and Google Domain
- Click Test Connection to verify setup
- Choose sync options: Users, Groups, Organizational Units, Auto-deploy signatures
- Set Sync Interval (minimum 15 minutes, default 60 minutes)
- Click Connect Google Workspace
Syncing & Assignment Rules
Syncing Employees
| Sync Type | Use Case | Description |
|---|---|---|
| Incremental | Daily use | Syncs only changed users—faster and efficient |
| Full Sync | Monthly/after changes | Syncs all users—ensures complete accuracy |
Trigger syncs from Integrations → Google Workspace. For each employee, Lastline syncs: name, email, position, department, phone numbers, organizational unit path, and status.
Assignment Rules
Rules automatically assign signatures based on organizational structure, evaluated in priority order (lower number = higher priority).
| Target | Use Case | Example |
|---|---|---|
| All Users | Company-wide default | Default signature for everyone |
| Organizational Unit | Department-specific | Sales team signature for /Sales OU |
| Google Group | Cross-functional teams | Executive signature for executives@company.com |
| Individual | Special cases | CEO-specific signature |
Example setup:
Priority 1: CEO Signature → Individual: ceo@company.com
Priority 50: Sales Team Signature → OU: /Sales
Priority 999: Default Signature → All Users
Deploying Signatures
- Manual: Select employees in Employees section → Actions → Deploy Signature
- Automatic: Enable Auto-deploy signatures after sync in connection settings
Troubleshooting
Connection Errors
| Error | Solution |
|---|---|
| "Domain-wide delegation is not configured" | Complete Step 2, wait 5-10 minutes for propagation |
| "Service account not authorized" | Re-copy Client ID, check for extra spaces |
| "Access denied / insufficient permissions" | Use a Super Admin account |
| "Invalid grant" | Wait 5-10 minutes and retry |
Sync & Deployment Issues
| Issue | Solution |
|---|---|
| No users syncing | Enable "Sync Users", verify users exist, check sync history |
| Missing org units | Enable "Sync Organizational Units", trigger full sync |
| Employees not getting signatures | Check rules are enabled, verify priority/targets match |
| Signatures not appearing in Gmail | User may have disabled signatures; re-deploy |
| Deployment fails for some users | User may not have Gmail enabled; deploy in batches for large orgs |
Disconnecting
Go to Integrations → Google Workspace → Danger Zone → Disconnect. This stops syncing but keeps all employee data, rules, and deployed signatures. To fully revoke access, remove Lastline's Client ID from Google Admin Console's Domain-Wide Delegation.
Best Practices & Limits
Best Practices
- Syncing: Start with full sync, then use incremental daily. Run full sync monthly to catch missed changes.
- Rules: Start with one "All Users" default rule, then add specific rules. Test priority with a few users before rollout.
- Security: Review Admin SDK logs periodically and audit domain-wide delegation authorizations regularly.
Limits
| Limit | Value |
|---|---|
| Sync Interval | Minimum 15 minutes |
| Users / Rules | No limit |
| API Rate Limits | ~1500-2000 requests per 100 seconds (Google's limit) |
Still need help?
Our support team is here to assist you.