With this feature, Google districts can automatically create user accounts in Sites when staff log in with Google SSO for the first time. Sites checks the user’s Google domain and sets up a default account with “read-only access to the intranet”, so there’s no need for a formal user sync. Site administrators can give users more permissions later if needed. If a user’s Google account is disabled or removed from the district’s domain, they won’t be able to log in to Sites anymore. You can turn this feature on for each site as needed.
Why does Google SSO account Auto-Provisioning matter?
- Eliminates the need for user sync, allowing staff to log in with Google SSO.
- Faster onboarding - users can access the intranet content immediately.
- Secure by default - auto-provisioned accounts start with read-only access.
- Natural offboarding - disabling a user in Google automatically removes their ability to sign in to Sites.
- Flexible rollout with per-site enablement.
What will change if we use Google SSO acount Auto-Provisioning?
- Districts using Google SSO can enable an option that automatically provisions new user accounts on first login.
- Only users from the district’s verified Google domain can log in or be auto-provisioned.
- Auto-provisioned users receive no elevated permissions until they are assigned by an admin.
- Access is automatically revoked when a Google account is removed or disabled.
Please reach out to SchoolStatus Sites support if you are interested in enabling Google SSO Auto Account Provisioning for your website.