To setup G Suite to integrate to CRM Online - one would need to:
- Prepare your SuperOffice CRM Online for the integration (step 1)
- Prepare your G Suite (step 2)
- Connect your G Suite and your SuperOffice CRM Online (step 3)
Index:
Integration overview
This section outlines how the integration works and what components are required and interacting.
Description of integration
Integrating SuperOffice CRM Online against Google G Suite enables the following functionality:
• Signing in to SuperOffice CRM Online with a Google G Suite-account.
• Using Google Drive to store documents and templates in the document archive.
• Using Google Drive to edit documents in the document-archive (if file-type is supported by Google Drive).
• This app is available for all SuperOffice CRM Online user plans
• No support for 'Quote Details Templates', and 'Quotations templates' containing merge field <<QuoteDetails>>, when a document is to be stored in Google Drive
The integration consists of four main components:
• SuperOffice CRM Online
• SuperOffice Federation Gateway (http://superid.superoffice.com/)
• Google G Suite subscription
• Google G Suite "Service account" with Google Drive
To ensure the security and integrity of the documents stored in Google Drive, SuperOffice will store all documents on a single Google G Suite Account (the service-account and “owner” of the document-archive).
While not required, SuperOffice recommends that a dedicated Google-account is set up and used for this purpose.
For SuperOffice Online to be able to use Google G Suite for storage, SuperOffice must first be authorized to access data stored in the organization’s Google Drive.
The authorization process will grant rights to an app registered with Google G Suite called “SuperOffice“. This is the SuperOffice Federation Gateway which handles secure communication between Google G Suite, SuperOffice Online and other parties (like SuperOffice Mail Link).
Read more about the technical description in this article.
Prerequisites
The following components will be required to complete this configuration process:
• A SuperOffice Online subscription
• A Google G Suite subscription (All users must have a G Suite user account (a private Gmail account is not sufficient))
• Administrator access to SuperOffice Online.
• We recommend: Access to a dedicated Google G Suite service-account (regular user Googe user account - used for the integration. See 'Considerations' for more information), or ability and rights to create one.
What is G Suite?
G Suite is a set of Google applications that brings together essential services to help your business. This is a hosted service that lets businesses, schools, and institutions use a variety of Google products -- including Email, Google Docs, and Google Calendar -- on a unique domain (e.g., www.yourcompany.com).
For instance, if you own the domain example.com and you sign up for G Suite services, everyone at your organization will get:
- A custom email address (user@example.com)
- Tools for word processing
- Spreadsheets and presentations
- A shared calendaring system
- Tools for creating web pages and sites for your business
- Access to a flexible intranet system
- And much, much more!
How is a Google Account different from a G Suite account?
Although G Suite and Google Accounts allow you to access several of the same Google products, they're different types of accounts. A Google Account is a unified sign-in system that provides access to a variety of free Google consumer products -- such as Gmail, Google Groups, Google Shopping List, Picasa, Web & App Activity, and Blogger -- administered by Google. G Suite provides access to products powered by Google but administered by your organization.
Not sure what kind of account you have?
If you’re able to edit your account recovery options,
then you have a Google Account. If you sign in to your account to the account recovery options page
and receive a message with details to contact your administrator, then you have a G Suite account.
You may also check the domain name via G Suite Toolbox Dig (Google MX record lookup tool):
Step 2. Type in your domain name
Step 4. identify if it includes "ANSWER" and what this answer redirects to.
If the answer includes "Google" – you should be good to go!
Planning
Due to the requirements of recycling the site, it is best practice to plan ahead:
- Connecting your G Suite and your SuperOffice CRM Online requires recycling the site
- Registering your IDP can be completed in advance at any time
- Creation of the "service account" in Google G Suite can be completed in advance at any time
- All usernames in CRM Online must match the Google domain username, and can be set in advance at any time. Remember to notify users of any change to their username.
Integration setup
1 – Prepare your SuperOffice installation
a) Update usernames in SuperOffice CRM Online Admin
All SuperOffice user names must match the email address of a Google-account that belong to <customerdomain.com>
Update usernames in SuperOffice CRM Online Admin if needed.
NOTE!
The login process of CRM Online communicates with Google Authentication and uses the CRM Online username. For Google to be able to identify and validate users, and for SuperOffice CRM Online to be able to use the credentials received from Google - user names in CRM Online and Google must match.
When Google G Suite integration has been enabled in step 3, all users will be required to have a Google account and use this to log onto SuperOffice CRM Online and use the integration.
Make sure the user's user names in SuperOffice CRM Online is what the user's user name is in Google:

You see the Google user names here: https://admin.google.com/ac/users
b) Make sure you have registered your IDP for your domain
Read how-to here:
How to configure IDP
2 - Create a Google G Suite "service-account" (recommended)
We recommend using a dedicated Google G Suite service-account (a regular Googe user account, which is not a personal user account) for the integration. See 'Considerations' for more information.
Create a Google G Suite service-account for SuperOffice in your Google G Suite domain
1. Log into your Google G Suite installation as a Google G Suite administrator.
In a browser go to http://admin.google.com and navigate to the 'users' section.
2. Add a new user
3. Fill in the form with suitable information.
Bear in mind that the name for this user will be visible for users when they see a shared document in their Google Drive folder. Do also fill in a sufficiently complex password, document it and remember it. You will need to sign into this account later.
4. Log out of your Google G Suite Admin account
Access the logout button from the top-right corner.
5. Log into your new Google G Suite Service-account to validate the account:
• Go to https://accounts.google.com.
• Log in using the details you used to create the service-account in the previous step. (Do not log in using your Google G Suite Admin account)
If successful, you should be brought to a page which shows you information about your current account.
3 – Connect Google G Suite and SuperOffice CRM Online
To connect Google G Suite and CRM Online - you may use standard setup (Root folder in Drive) or choose to specify where in the Drive folder structure to store the templates and documents.
You may also choose if you want to use SuperOffice standard folder rights (Access to all in <customerdomain.com>), or use inherited folder rights by choosing "Use inherited permission".
NOTE!
Your site must be ‘recycled’ to get the new configurations! All user on this site will be logged out when you click “Configure SuperOffice” in the step below. The users may log in again right afterwards, but they might loose unsaved work.
Connect your SuperOffice Online installation to Google:
1. Ensure you logged into your SuperOffice CRM Online installation
2. Go to https://cloudintegration.superoffice.com/app
You will then be asked to authorize SuperOffice and grant it access to your Google G Suite service-accounts data.
Ensure that you are approving on behalf of the service-account and not your regular user-account by checking the account chosen!
Supply your new Google G Suite Service-account (created in step 4 above)
Click "Continue"

If you are not logged into the G Suite account - you will be redirected to do so.
If you have failed to register IDP correctly prior to this, you may get a warning both "This app has not been verified by google" and "SuperOffice.com wants to access your Google account". You may approve and continue.

Either leave settings as is - or change them to your preference.
Click “Configure SuperOffice”.

If the linking of SuperOffice and Google is successful this will be reported. (If the linking fails - please contact SuperOffice Support.)
Your SuperOffice Online installation is now able to talk to Google G Suite and use your service-accounts Google Drive as a document-storage backend.
4 – Update document template storage location in SuperOffice Admin
How to setup configuration for use (user authentication + document handling) is documented in this article.
How to log in to CRM Online with Google authentication activated
Go to online.superoffice.com
Type in the email address, click [Next].
- If your browser already has an active Google session - it will re-use this session to log you automatically in.
- If your browser has no active Google session - it will re-direct you to Google for authentication before logging you into CRM Online.
"Forgot password" feature is now handled by Google - since Google is activated as the authentication method for this site.
Considerations / Security
Default access permission on documents
Documents created via SuperOffice which are hosted in Google Drive will be given a default-permission that is “accessible to anyone in the Google G Suite" domain.
This default behavior can be changed to "inheritance to folder" by contacting Support.
Miscellaneous security-related UI details
Users of SuperOffice Online opening documents hosted in Google Drive will see these documents in their Google drive recent document list.
The owner name will be the one used for the Service Account when the service-account was created:

This is how Google Drive collaboration works.
The actual SOARC document-tree will not be visible nor accessible in the end-users drive directory tree:

This is not a bug. This is by design.
Set access permission on document archive for cross-domain access
Documents are created in Google Drive by the service-account (owner), but users of other domains will by default not have access to open it.
- This can be achieved by either sharing the Google Drive folder with specific users or using Google Group (for easier management).
- Contact support if you like to put all SuperOffice documents and templates into one Google Drive folder; provide the folder name.
Note! This is an example of custom setup and is not supported by SuperOffice, but can be achieved by configuring your G Suite access permissions and is supervised and managed by the customer themselves. Warning! Items with any link sharing option can be published on the web, and potentially be a risk that other people can get access to it.
Documents created via SuperOffice which are hosted in Google Drive will be given a default-permission that is “accessible to anyone in the Google G Suite" domain.
If your company and business structure use/cross multiple G Suite domains (ie. companyA.com, companyB.com, companyC.com) - users belonging to other domains than the domain the service-account belongs to, will get a "You need permission" page, by default.
To add access permission on document archive for cross-domain access:
- Logged in as Google Admin of the domain that belongs to the service-account :
Add your other domain names to the "Whitelisted external domains"
- Create a group, and edit the group information settings to:
a) "Allow members outside your organization" to be checked.
b) Modify the group settings to suit your need (ie. Posting options, who can join, Permissions, etc.)
Link to Google Help: Create a Google Group.
- Add your other domain-users to this group by selecting the group (clicking check), and click "Add users to group"

Link to Google Help: Add members to the group.
- Logged in as SO Google service-account:
Edit Share settings for the folder in Drive - to include this group (from step #2)


The users belonging to other domains than the domain the service-account belongs to should now have access.
Moving existing SuperOffice documents and templates between SuperOffice Online and Google Drive
NOTE:
• All documents written in SuperOffice will be stored in the Google cloud if the template is set up for it, and available to open and edit in SuperOffice CRM Online
• If you want to use your G Suite account to edit SuperOffice templates, the SuperOffice templates need to be moved from SuperOffice to your G Suite account
• Old documents will not automatically be moved from SuperOffice to G Suite
• Moving existing documents or templates to or from SuperOffice and G Suite is not offered as a service. A SuperOffice consultant might be able to assist you in a manual transition.