Skip to content

Integrating SailPoint with Google Classroom

Google Classroom is a blended learning platform developed by Google for educational institutions that aims to simplify creating, distributing, and grading assignments. It provides APIs to manage courses, users (students and teachers), and rosters, allowing seamless integration with external systems for identity and access management. This document provides instructions to configure a new direct connection to a Google Classroom source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Google Classroom connector supports the following:

Account Management

  • Aggregate Users

  • Entitlement Management (via Account Attributes)

    Note

    The managed system supports aggregating user permissions directly as part of the account aggregation process.

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Before configuring the Google Classroom source, complete the following steps:

  1. Log in to the Google Cloud Console.
  2. Create a new project or select an existing one.
  3. Navigate to APIs & Services > Library and enable the Google Classroom API.
  4. Go to APIs & Services > Credentials and click Create Credentials > OAuth client ID.
  5. Select the application type (for example, Web application) and enter an application name.
  6. Set the Authorized Redirect URI.
  7. Generate and copy the Client ID and Client Secret.
  8. Generate a Refresh Token using the Client ID, Client Secret, and the required Google Classroom scopes.
  9. Identify the specific Course ID you wish to manage users for.

For more information about the Google Classroom API, refer to the Google Classroom REST API documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

Required Permissions

  • The following OAuth scopes are required:
    • https://www.googleapis.com/auth/classroom.courses.readonly
    • https://www.googleapis.com/auth/classroom.profile.emails
    • https://www.googleapis.com/auth/classroom.profile.photos
    • https://www.googleapis.com/auth/classroom.rosters.readonly