Connect Google Workspace

Overview

Meter authenticates Wi-Fi users against Google Workspace using Secure LDAP, the LDAP interface Google Workspace exposes for this purpose. You create an LDAP client in Google Admin, download the certificate it generates, and upload that certificate to Meter.

Prerequisites

  • A Google Workspace plan that includes Secure LDAP
  • Administrator access to the Google Admin console
  • Your Workspace primary domain, for example example.com

Step 1: Create the LDAP client in Google Admin

  1. Sign in to the Google Admin console as a super administrator.

  2. Go to Apps → LDAP.

  3. Click Add client.

  4. Enter an LDAP client name such as Meter NAC and an optional description.

  5. Set the access permissions. All three are required:

    • Verify user credentials: set to Entire domain. Checks the password when someone connects.
    • Read user information: set to Entire domain. Finds the user and reads their group membership.
    • Read group information: turn On. Lets you search your groups when creating mappings.

    You can scope the first two to selected organizational units instead but anyone outside those units cannot connect to Wi-Fi.

  6. Click Add LDAP client.

Step 2: Download the certificate

  1. On the confirmation screen, click Download certificate.
  2. Unzip it. You get a .crt and a .key.
  3. Keep both. Google does not let you download them again.

Step 3: Turn the service on

New LDAP clients are disabled by default.

  1. On the client's detail page, find Service status.
  2. Select ON for everyone and click Save.

Step 4: Connect it in Dashboard

  1. Log in to the Dashboard.
  2. Go to NAC → Identities → IdPs.
  3. Click Connect IdP and choose Google Workspace.
  4. Fill in the form:
    • Domain: your Workspace primary domain, for example example.com
    • Certificate: the .crt file from step two
    • Private key: the .key file from step two
  5. Click Save.

Need help?

If you run into any issues or have questions, please reach out to our Support Engineering team by opening a ticket via the Dashboard: https://dashboard.meter.com/support

Was this helpful?
PreviousOverviewNextMicrosoft Entra ID