Set up Lucidchart and Lucidspark for your Google Workspace domain to easily manage your team. With these Google Workspace integrations, you can invite users on your domain to join your team, set up Google OAuth Log-in (Google SSO) as the default login method, and provision users with Lucid accounts directly in Google Workspace.

In addition to Google Workspace integrations that are discussed in this article below, we also offer Lucid add-ons for Google Docs, Sheets, and Slides, Lucid-add ons for Google Calendar, and a Lucidspark integration with Google Meet. Refer to the linked articles for installation instructions and more information on each of these offerings.

Free	Individual	Team	Enterprise	FedRAMP

For service and super admins: Install Lucidchart or Lucidspark for Google Workspace

To link an existing Lucid account to Google Workspace, you will need your Lucid account to be set up under the same email address as your domain email address. You can easily change your Lucid email address in your Account Settings.

First, make sure your admin user has the correct permissions:

Navigate to the directory in Google Console.
Click on Users.
Select your admin username.
Scroll down and select “Admin Roles and Privileges”.
Make sure the following roles are assigned:
Click Save.

To install Lucidchart, Lucidspark, or Lucidscale for Google Workspace, follow these steps:

Select Apps.
Navigate to the Google Workspace Marketplace apps.
Select Apps list.
Click “Add apps to domain install list”.
Search for the Lucidchart, Lucidspark, or Lucidscale Diagrams for Google Suite apps.
- Note: There are two Lucidchart applications, “Lucidchart” and “Lucidchart Diagrams for Gmail”.
Select Admin Install.
Click Continue.
Indicate whether you want to install the app for everyone at your organization or only certain groups or organizational units.
Click Finish to complete the installation.

Enable Google OAuth log-in (Google SSO)

Once you have installed Lucid for your Google Workspace domain, you can adjust your team's login settings so that any user on your team's domain can log in to Lucid with their Google account.

To set Google Single Sign-on as the default login method for users, follow these steps:

Log in to your Lucid account.
Navigate to your admin panel by clicking Admin.
Expand the Security dropdown in the left-hand menu of the admin panel.
Click Authentication from the breakdown of left-hand menu options.
Make sure "Allow Google single sign-on" is selected. You can select or unselect any of the other methods.
Select Google SSO from the default authentication dropdown.
Click Save changes.

Google Drive backup integration (Lucidchart only)

With the Google Workspace integration, you can require automatic backups of each user's files to their Google Drive account. Backups are stored as .laf files in each member's Google Drive and can be restored in their Lucid account at any time.

To access this setting, choose App integration in the left-hand menu from the Admin Panel, choose Google Workspace, and then select the Google Drive Integration tab from the navigation bar on the left. Then, you can enforce weekly backups, not require a backup, or prevent backups entirely.

Note: Google Drive backup is currently only supported for Lucidchart documents.

Provision users with Google Workspace

Lucid can sync with your Google Workspace domain to automatically provision or delete users when you add or remove them from your Google Workspace administration portal. Important Note: To use Google Workspace to provision users on your Lucid account, you must install the Lucidchart app from the Google Marketplace, regardless of which product(s) you’re using.

Google Workspace provisioning is only available to Enterprise accounts. To upgrade, please contact our sales team.

Sync settings

Once you set up your Google Workspace connection, you need to make sure you have correctly set the Google Workspace provisioning settings in the Lucid Admin Panel under the Google Workspace App Integration. Select the Sync Settings tab to access the following page.

google-workspace-sync-settings-in-lucid-admin-panel.png

From here, you can choose whether the changes made in your Google Workspace account will affect the provisioning and de-provisioning of those users in Lucid.

If you opted to automatically provision users when they are created in your Google Workspace account, they will be automatically added without invitation emails. However, any pre-existing users in Google Workspace from before provisioning was set up with Lucidchart will not be automatically added. Invitations will be sent to those users and they will remain in “Pending” status until they accept the invite.

If you opt to enable the automatic deprovisioning of users when they are deleted from your Google Workspace account by checking the second check box, the documents associated with users being removed will be transferred to the default document owner to ensure no data is lost with the deleted user. The user will no longer appear under your Users list in the Lucid admin panel once they’ve been deleted.

Licensing settings

Adjust your licensing settings to make sure you have accounted for how users will receive licenses post their creation or upon a license request. If you are using both Lucidchart and Lucidspark, you will need to select these settings for both products. To see the steps, read our Lucid admin panel: License settings article.

In the Lucid admin panel, you can add existing G-suite users before they are provisioned in Lucidchart. Invitations will be sent to these users, and their status will stay as "Pending" until they accept the invite. After you enable Provisioning, new G-suite users will be automatically added to Lucidchart. No invitation emails will be sent, so users aren’t required to accept an invitation.

Google Organizational Units sync

Lucid can sync with your Google Organizational Units (OU).

Note: If you are on the organizational groups experience, Google OU is not available to your account. Refer to our Lucid admin panel: Group management article to determine if you're on the organizational groups experience and for details on how to successfully use it.

You will need to correctly configure your Google Workspace instance for the sync to work. Keep in mind, the sync process does not create, edit, or delete users. It syncs the structure of the organizational units, along with their memberships. If a user is present in an org unit in Google Workspace but not present in Lucid’s system, they will be ignored. Likewise, if a user exists in Lucid but not in any org units in Google Workspace, they will not be added to any groups synced from Google Workspace.

To sync your Google Organizational units, follow these steps:

Select Admin.
Click App integrations in the left-hand menu.
Select the Google Workspace tile.
Under Sync Settings, check the box to sync your Google Organizational Units.

What to expect when syncing Google Organizational Units

Organizational Units do not begin syncing automatically after setting up Google Workspace. Make sure to initiate a sync by clicking Sync Now. If you have enabled automatic daily syncing, please allow at least 48 hours for the sync to complete.
Google OU syncs will override manual changes made in Lucid. If you want to make adjustments to your groups (adding or removing a user, make someone a non-primary user), ensure that you do so in your Google Workspace prior to syncing.
If you alter your Organizational Units (including names, configurations, memberships) within Google Workspace during a sync, it is possible that not all of your changes will be reflected. If any changes are not properly showing, you may need to run the sync again. If you have automatic syncing enabled, these mismatches will be automatically corrected with the next sync.
While the Organizational Unit sync is in progress, it is normal for customers to see incremental changes being made to their groups as it runs. They may see groups being moved around, being renamed, and users being added and removed if they keep refreshing their users page while it is in progress. If they see any groups that are created with no users in them, this is also normal. The membership of these groups will be filled out as the sync progresses.

Google Organizational Units configuration

Configure your Google Workspace instances using the steps outlined below to enable Organizational Unit syncs.

Locate OAuth scopes

An admin can find these scopes within Google Workspace under:

Select "Apps".
Click "Google Workspace Marketplace Apps"
Select "Lucidchart Diagrams"
Click "Data Access".

Enable OAuth scopes

Enable the appropriate OAuth scopes for the Lucidchart application, including:

View groups on your domain
View organizational units on your domain
See info about users on your domain

Note: If you installed the Lucidchart app prior to May 2020, these scopes may need to be enabled.

For admin: Google admin email

The install process will set the email address to the Google Workspace account’s superuser.

FAQ

Can I use Google Workspace to assign licenses to users in Lucid?
No. You can provision users with Google Workspace, or set up a Google Workspace SAML/SCIM connection with user provisioning, but it is not possible to assign licenses to users with this connection.

Give feedback on this article

Have feedback about this article? Tell us about your experience here.

Related articles