Creating Applications Using the Google Apps Connector

Prepare to Onboard the Application

Navigate to the OTN website at http://www.oracle.com/technetwork/middleware/id-mgmt/ downloads/connectors-101674.html.
Click OTN License Agreement, and read and select the Accept License Agreement option. You must accept the license agreement before you can download the installation package.
Download and save the installation package to any directory on the computer hosting Oracle Identity Governance.
Extract the contents of the installation package to any directory on the computer hosting Oracle Identity Governance. This creates a directory named googleapps-RELEASE_NUMBER. For example, googleapps-12.2.1.3.0.
Copy the googleapps-RELEASE_NUMBER directory to the OIG_HOME/server/ConnectorDefaultDirectory directory.

Download the following JAR files to a temporary location: httpclient-4.5.2.jar httpcore-4.4.6.jar jackson-core-2.9.4.jar
Navigate to the Google Developers website at https://developers.google.com/.
Search for and download the ZIP for Admin Directory API directory_v1 Client Library for Java, and then extract the following libraries to the temporary location used earlier: google-api-client-1.23.0.jar google-api-services-admin-directory_v1-rev91-1.23.0 google-http-client-1.23.0.jar google-http-client-jackson2-1.23.0.jar google-oauth-client-1.23.0.jar
Similarly, search for and download the ZIP for Groups Settings API Client Library for Java, and then extract the google-api-services-groupssettings-v1-rev67-1.23.0.jar library to the temporary location used earlier. Note:You can either use the specified JAR file versions mentioned in the preceding procedure or any latest, stable, and secure version.
On the computer hosting Oracle Identity Governance, create a directory named googleapps-RELEASE_NUMBER under the OIG_HOME/server/ConnectorDefaultDirectory/targetsystems-lib/ directory.
Copy all the third-party libraries (JAR files) listed earlier to the OIG_HOME/server/ConnectorDefaultDirectory/targetsystems-lib/googleapps-RELEASE_NUMBER directory.

Create a project and register your client application with the Google Apps Cloud platform in the Google Developers Console.
Activate the associated API services such as adding custom information, enable billing, and page monitoring services, for your client application. While activating the associated API services ensure that the statuses of the Admin SDK and Group Settings APIs are set to ON.
Create a service account and enable your client application to access the activated APIs. Additionally, create a Client ID, Public/Private key pair, and password for the earlier created service account. After the service account creation, note down the Client ID, Public/Private key pair and password information.
Add scopes and authorize the registered client application.
Create a user account on the target system. Post account creation, assign the Groups Admin and User Management Admin admin roles to the newly created account.
Enable access to various Google administrative APIs available in the Google Apps Business Domain.
Enable external user access to groups in Google Apps. Perform this step only if you want external users to access groups in Google Apps.

Log in to Identity Self Service either by using the System Administration account or an account with the ApplicationInstanceAdministrator admin role.
Click the Manage tab and then click the Applications box to open the Applications page.
Click Create on the toolbar, and select the type of application to create - Target.

On the Basic Information page, select Connector Package.
From the Select Bundle list, select the relevant connector package bundle. For example, GoogleApps Connector 12.2.1.3.0.
Enter the Application Name, Display Name, and a Description.
In the Basic Configuration section, enter the values to include connectivity-related information.
(Optional) In the Advanced Settings section, update configuration entries related to connector operations.
Click Next.

On the Schema page, review the default schema mapping between Oracle Identity Governance and your target system.
To add attributes to the default schema, click Add Attribute and then enter values for the Identity Attribute, Display Name, Target Attributes, and Data Type fields and the Mandatory, Provision Field, Recon Field, Key Field, and Case Insensitive properties.
To delete attributes from the default schema, click the Delete icon corresponding to the attribute.
Click Next.

On the Settings page, expand Preview Settings to review the settings for your application.
On the Provisioning tab, review any predefined provisioning configurations such as Transformation, Validation, and Action scripts and edit them if required. The Provisioning tab is available only if you are creating a Target application.
On the Reconciliation tab, review and edit (if required) the predefined identity correlation rules and situations and responses. In addition, review the predefined reconciliation jobs and edit them if required.
On the Organization tab, review the default organizations to which the application must be published. If required, click the Add or Delete icons to add or remove organizations.
On the Catalog tab, if required, configure the settings to make the application available in the request catalog. The Catalog tab is available only if you are creating a Target application.
Click Next.

On the Review Summary page, review the details of the application being created.
If you want to save use the same settings for onboarding multiple applications, click Save As Template to save all the settings as an application template.
Click Finish. The application is onboarded and you can search for and view it on the Applications page.

You're done!