Google Workspace
Employee accounts are read from Google Workspace and matched with leak records.
How it works
The connection runs over the Admin SDK. The only scope requested is directory read: admin.directory.user.readonly. It can see the user list and cannot change it.
For each account the stable identifier, primary address, active state and guest state are taken. Fields such as name, phone and department are not read.
Synchronisation requires approval; what will happen is shown first.
Limits
Only the user list is read; there is no access to email content, files or calendars.
It does not work on personal Gmail accounts.
A partial list is never accepted: if paging cannot complete, no synchronisation happens.
Setup
The setup steps are in the panel, on the integration’s own screen. What to do on the provider side and which value goes where is written there.