Google Workspace Changes

Alert Center notifications for Apple push certificates.

To help you stay on top of their renewal period and take action in a timely manner, we will: Notify you via the Alert Center and email when: Your certificate is 30, 10, and 1 day from the date of expiration. Your certificate has expired.

Stronger protection for sensitive Google Workspace account actions

There are now stronger safeguards for sensitive actions taken in your Google Workspace account. These apply to actions that, when done by hijackers, can have far reaching consequences for the account owner or the organization it belongs to.

Context-Aware Access remediator provides more context for access denials

Admins using Context-Aware Access can now provide more information to end users when their access is blocked using the user remediation feature. This feature will help end users quickly understand what steps they need to take to re-access Google Workspace.

Send group membership information in outbound SAML responses

We’re adding the ability for admins to configure and send group membership information as part of SAML responses.

Set up SSO profiles for multiple third-party identity providers with the Multi-IdP SSO beta launch

You can further customize authentication by setting up single sign-on (SSO) profiles for multiple identity providers and then configuring authentication for each group or OU.

Use a new enterprise certificate condition to set context-aware access rules for company-managed devices

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned.

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned.

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned. By using new enterprise certificates as an alternative context-aware signal to determine if a device is a company-managed asset, you can set more specific context-aware policies that are appropriate based on the trustworthiness of the device.

Admins can now install Google Workspace Marketplace applications for specific groups.

Google Workspace admins can now use the 'admin-install' functionality to install Marketplace applications for specific groups within their organization. Previously, admin-installing applications was only possible for organizational units or an entire domain, but this update allows for more granular distribution to specific subsets of users, such as sales, marketing, or legal teams.

Assign SSO profile to organizational units or groups with the SAML Partial SSO feature, now generally available

This feature is now generally available and allows admins to specify groups or organizational units (OUs) to authenticate a subset of your users using Google.

Google for Education transformation reports window is now open with improved access and real-time customization.

Google for Education transformation reports are now available for K-12 Google Workspace for Education customers worldwide. The current reporting window is open from November 2, 2021, to December 10, 2021. Key improvements include immediate access for super admins upon login without a waiting period, the removal of the requirement to request a report in advance, and the ability to adjust product data windows and expected user counts in real time.

Fortanix and Stormshield added as Key access service partners for Client-side encryption

Google has added Fortanix and Stormshield as new Key access service partners. These partners provide tools that integrate with Google's key access service APIs, offering customers dedicated key management and access control capabilities for their encrypted Google Workspace data.

Key access service APIs for Client-side encryption are now publicly available

Google has publicly released the key access service API specifications. This allows developers and organizations to build or integrate their own in-house key services to manage encryption keys and access control for Client-side encryption within Google Workspace.

Google Workspace Client-side encryption beta expanded to include Google Meet and Google Drive for desktop

Google is expanding the beta for Client-side encryption (CSE) to include Google Meet and Google Drive for desktop. This allows eligible customers to have direct control over encryption keys and the identity provider used to access them, enhancing data confidentiality and helping organizations meet strict data sovereignty and compliance requirements such as ITAR and CJIS.

View richer coworker information in the sidebar for Google Chat, Calendar, Docs, Sheets, and Slides.

Users can now access additional information about people within their organization, including contact details, team and manager information, and office or desk locations, directly within the sidebars of Google Chat, Calendar, Docs, Sheets, and Slides. This feature, which was already available in Gmail, allows for better visibility of organizational directory data across multiple Google Workspace products.

Material You design system rolling out for Google Workspace apps on Android.

Google is introducing Material You, a new design system for Google Workspace apps on Android devices. This update brings a fresh look and feel, including updated navigation bars, improved floating action buttons, and the use of Google Sans text for better readability. On Android 12 and Pixel devices, users can personalize app colors to match their device wallpaper. The update also includes automatic adjustments for contrast, size, and line width to improve accessibility across apps including Gmail, Meet, Drive, Docs, Sheets, Slides, Calendar, and Keep.