Google Workspace Changes

If you’re a Google Workspace admin, you can now track the carbon footprint and gross emissions of using Google Workspace.

If you’re a Google Workspace admin, you can now track the carbon footprint and gross emissions of using Google Workspace. This means you can track the emissions impact of tools such as Google Meet, Gmail, Google Docs, and more.

Google Workspace for Education Admins must review and confirm access settings for third-party configured apps by Oct 23, 2023.

Through the app access control settings, we’re making it easier for Google Workspace for Education admins to control how third-party apps access their organizations' Google data when users sign-in using their Google Workspace for Education accounts.

Enhanced third-party app access controls for users designated as under 18 in Google Workspace for Education.

Google Workspace for Education admins now have enhanced controls to manage how third-party apps access organizational data for users designated as under 18. Users under 18 are required to request access to apps that are not already configured as trusted, limited, or blocked, although admins can allow users to skip this request for apps that only require basic profile information. Admins can now configure these settings by organizational units and must review and confirm existing third-party app settings by October 23, 2023, to ensure uninterrupted access for users under 18.

Alert Center notifications for Apple push certificates.

To help you stay on top of their renewal period and take action in a timely manner, we will: Notify you via the Alert Center and email when: Your certificate is 30, 10, and 1 day from the date of expiration. Your certificate has expired.

Stronger protection for sensitive Google Workspace account actions

There are now stronger safeguards for sensitive actions taken in your Google Workspace account. These apply to actions that, when done by hijackers, can have far reaching consequences for the account owner or the organization it belongs to.

Context-Aware Access remediator provides more context for access denials

Admins using Context-Aware Access can now provide more information to end users when their access is blocked using the user remediation feature. This feature will help end users quickly understand what steps they need to take to re-access Google Workspace.

Send group membership information in outbound SAML responses

We’re adding the ability for admins to configure and send group membership information as part of SAML responses.

Set up SSO profiles for multiple third-party identity providers with the Multi-IdP SSO beta launch

You can further customize authentication by setting up single sign-on (SSO) profiles for multiple identity providers and then configuring authentication for each group or OU.

Use a new enterprise certificate condition to set context-aware access rules for company-managed devices

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned.

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned.

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned. By using new enterprise certificates as an alternative context-aware signal to determine if a device is a company-managed asset, you can set more specific context-aware policies that are appropriate based on the trustworthiness of the device.

Admins can now install Google Workspace Marketplace applications for specific groups.

Google Workspace admins can now use the 'admin-install' functionality to install Marketplace applications for specific groups within their organization. Previously, admin-installing applications was only possible for organizational units or an entire domain, but this update allows for more granular distribution to specific subsets of users, such as sales, marketing, or legal teams.

Assign SSO profile to organizational units or groups with the SAML Partial SSO feature, now generally available

This feature is now generally available and allows admins to specify groups or organizational units (OUs) to authenticate a subset of your users using Google.

Google for Education transformation reports window is now open with improved access and real-time customization.

Google for Education transformation reports are now available for K-12 Google Workspace for Education customers worldwide. The current reporting window is open from November 2, 2021, to December 10, 2021. Key improvements include immediate access for super admins upon login without a waiting period, the removal of the requirement to request a report in advance, and the ability to adjust product data windows and expected user counts in real time.

Fortanix and Stormshield added as Key access service partners for Client-side encryption

Google has added Fortanix and Stormshield as new Key access service partners. These partners provide tools that integrate with Google's key access service APIs, offering customers dedicated key management and access control capabilities for their encrypted Google Workspace data.

Key access service APIs for Client-side encryption are now publicly available

Google has publicly released the key access service API specifications. This allows developers and organizations to build or integrate their own in-house key services to manage encryption keys and access control for Client-side encryption within Google Workspace.