Directory sync

Directory sync (/admin/directory-sync) connects your Google Workspace directory to signplume. Until it is connected, the screen shows the one-time setup and the form for the service account's key; Connect Google Workspace walks through both, with every scope signplume asks for.

Connection

Once connected, the Connection card shows the service account, the admin it acts as, the customer, when it last ran and how many people it links.

• Sync now runs it straight away. While it is switched on, it also runs on its own about every six hours.
• Pause syncing stops the runs but keeps the credentials; Resume syncing starts them again.
• Last run counts the people the run added, updated, left unchanged, found departed and could not sync. If a run fails, the screen shows Google's own words in a red banner.

What a sync does:

• It matches people on Google's own id for them, so a renamed mailbox keeps its record and moves to the new address.
• It never clears a field Google does not carry: a phone number entered by CSV stays if Workspace has none.
• A field you have handed to people on People (self-service editing) is not overwritten.
• People added by CSV who are not in Workspace are left alone.
• When adding someone would take you past your plan's cap, that person is refused and the rest of the directory still syncs.

When someone leaves Workspace

A suspended or deleted Workspace account is always marked departed, and listed under Departed from Workspace. By default a departed person still counts towards your plan and keeps their signature until you archive them on People. Press Archive leavers automatically to have each sync archive them for you; the archive is reversible, so a mistake is one click to undo. If someone the sync archived comes back (an account that is restored in Workspace, or a new account on the same address), the next sync restores them and their signature returns. It costs a seat; if your plan is full they stay archived until there is room. Someone you archived yourself on People is never restored by a sync. An empty or failed listing never counts as everyone leaving, so it never archives in bulk.

Push signatures into Gmail

The Push signatures into Gmail card switches on Gmail push, which writes each person's signature into Gmail. It needs one extra scope on the same delegation, which the card shows, and it lists each person's last push: Pushed, Failed with Google's reason, or Pending.

Groups

With the group scope granted, your Google groups sync too, for group templates on Rules and group audiences on Campaigns. Sync groups on Rules fetches them on demand.

Replace credentials

Replace credentials, at the bottom, takes a new key. Saving always replaces the stored key; there is no way to change the other fields and keep it. The key itself is never shown on this screen.