Simployer logoGoogle Workspace logo

Identity and access management

Simployer to Google Workspace integration: Google accounts from Simployer One, from onboarding to departure

With an integration between Simployer One and Google Workspace, a new employee gets a Google account with job title, department, manager and the organisational unit of their country. On the departure date in Simployer, KoppelHet suspends the account.

What the integration does

Organisations that use Simployer One as their HR system and Google Workspace as their workplace often create new Google addresses by hand. Job title, department and organisational unit stay empty in Google, and IT suspends leavers by hand.

  1. HR creates the new employee in Simployer One with work email, country and start date.
  2. KoppelHet creates the Google account.
  3. KoppelHet adds job title, department, employee number and manager and puts the account in the unit of the country.
  4. Changes in Simployer One go through to Google every hour.
  5. On the departure date KoppelHet suspends the account; after the retention period the files go to the manager.
Simployer → KoppelHet → Google WorkspaceSOURCESimployerTARGETGoogle WorkspaceKoppelHetmapping · logging · monitoringSimployer → KoppelHet → Google WorkspaceSOURCESimployerTARGETGoogle WorkspaceKoppelHetmapping · logging · monitoring
Out: Google account per employee · Organisational unit per country · Job title, department and manager · Suspension on the departure date

What to watch for with Simployer and Google Workspace

  • KoppelHet also puts job title, department and manager in Google, so the organisation structure in Google and in Gmail address books is right.
  • With several countries with their own domains, KoppelHet chooses the domain and the organisational unit from the country of employment in Simployer One.
  • KoppelHet suspends the account on the departure date from Simployer One, and only deletes after transferring the Drive files.
  • KoppelHet works with a service account with domain-wide delegation, limited to users, groups and file transfer, so no personal super admin account is tied to the integration.
  • A Simployer One access token gives owner rights on the whole account. KoppelHet only uses read calls with that token for the fields of the Google account, and advises a dedicated token for this integration that you can revoke separately.
  • For a relation of type manager Google expects the manager's email address. Simployer One only gives managerEmployeeId for an employee. KoppelHet looks up the manager's work email for that ID and puts it in Google.

This integration is also part of joiner, mover, leaver.

How we build and run it

  • The integration runs on the KoppelHet platform, hosted in a data centre in the EU.
  • Every sync and every error is visible in the functional log; on an error your administrator is notified.
  • A change that cannot go through is not half-applied but queued for another attempt.
  • KoppelHet is ISO 27001 certified. Data travels encrypted and stays on the platform no longer than needed.
  • After go-live we manage the integration and adjust it when your process changes.
  • The integration fits next to your existing integration layer. Only the fields in the design are transferred; the platform keeps no register of its own.

Implementation, architecture and compliance

Implementation and price

This is not an app you switch on. We build the integration for your organisation on our platform, with building blocks we reuse on every project. So it is custom work that does not start from scratch.

A consultant prepares the intake and analyses both systems. We then record the mapping and exceptions field by field, test in the test or acceptance environment and go live at a moment you choose. Costs are a one-off amount for the setup and a monthly amount for platform, monitoring and support.

Price indication · Basic

Leave your work email and you see the price indication right away.

We only use your address to follow up on your question about this integration.

Frequently asked questions

Does this also work with Simployer Classic?

This integration reads Simployer One. For Classic we check per customer which data is available.

Technical details for IT

For those who want to know how it works under the hood: APIs, fields and sources used.

  • Read Simployer One through the HRM One API (api.alexishr.com/v1, employee with employeeNumber, workEmail, employmentCountry, endDate and offboardDate; filter on updated) with an access token as bearer. To Google through the Admin SDK Directory API (users with externalIds, orgUnitPath, organizations, relations type manager and suspended) and the Data Transfer API, with a service account with domain-wide delegation.

Which fields are transferred

The key fields. The full mapping is agreed per customer.

Field in SimployerField in Google WorkspaceNotes
employeeNumberexternalIds (type organization)
Voornaam en achternaamname.givenName en name.familyName
workEmailprimaryEmail
Functieorganizations.title
Afdelingorganizations.department en groepen
employmentCountryorgUnitPath
managerEmployeeIdrelations (type manager)Converted to the manager's work email
offboardDate of endDatesuspended = true

Related

Which systems do you want to connect?

Tell us which systems you use and what should happen automatically. Together we define the smallest working solution, with a clear design and a quote before building.